Senior Cybersecurity Penetration Tester

BDO USA, Llp; Northern (KY); Hybrid; USD 120,000 - 160,000; Full time

Job summary

BDO USA, Llp is seeking a Senior Cyber Security Penetration Tester to perform offensive security testing for clients. You will define scope, execute tests across external/internal networks, AD, web/app testing, cloud, and M365, and communicate results to technical and executive audiences.

You will also help with red team exercises and contribute to internal tooling and automation, using CI/CD and Git workflows to improve repeatability and quality.

Qualifications

• Four or more years of hands-on penetration testing and security assessment experience.
• Experience producing professional services deliverables and communicating to non-technical stakeholders.
• Exposure to AI-enabled applications and OWASP Top 10 for LLM Applications is preferred.
• Scripting/automation experience in Python, PowerShell, or Bash is required.

Responsibilities

• Participates in client penetration testing and vulnerability assessments across networks, AD, web apps, cloud, and M365.
• Uses offensive security tools to identify, validate, and demonstrate exploitability for findings.
• Performs authenticated testing with proper access controls and rotation at closeout.
• Documents reproducible steps and remediation guidance for remediation and retesting.
• Reviews AI-enabled applications for risks and provides mitigation aligned to OWASP Top 10 for LLM.
• Supports scoping and delivery, coordinating with PM and client teams, ensuring safe testing within scope.
• Maps attack paths in AD engagements and provides actionable remediation suggestions.
• Produces high-quality deliverables including test plans and executive readouts with evidence.
• Maintains internal tooling and contributes via Git workflows and code reviews.

Skills

Kali Linux

Burp Suite

Metasploit

Nessus/Tenable

BloodHound

Active Directory

Python

PowerShell

Bash

Git

Docker

Azure

Microsoft 365

AI/LLM security

Threat hunting

Education

High school diploma or GED

Bachelor’s degree in Cybersecurity, Information Security, or Computer Science

Tools

Kali Linux toolchain

Nessus/Tenable

Nmap

BloodHound

Job description

BDO USA, Llp is seeking a Senior Cyber Security Penetration Tester to perform offensive security testing for clients. You will define scope, execute tests across external/internal networks, AD, web/app testing, cloud, and M365, and communicate results to technical and executive audiences.

You will also help with red team exercises and contribute to internal tooling and automation, using CI/CD and Git workflows to improve repeatability and quality.