Senior Cybersecurity Penetration Tester | AI & Cloud

BDO USA; United States; On-site; USD 120,000 - 160,000; Full time

Job summary

BDO USA is seeking a Senior Cyber Security Penetration Tester to perform offensive security testing for clients, define scope, execute testing across network, AD, web apps, cloud, and M365, and communicate results to technical and executive audiences. The role includes red team/purple team exercises with client SOCs, maintains tooling, and contributes to automation.

Strong hands-on skills in Kali, Nmap, Burp Suite, Metasploit, Nessus, and BloodHound are required, with OSCP or equivalents

Qualifications

• Four (4) or more years of hands-on penetration testing and security assessment experience.
• Experience communicating complex issues to non-technical stakeholders.
• Exposure to AI-enabled applications and OWASP Top 10 for LLM Applications (preferred).
• Experience with social engineering assessments (phishing, vishing, etc.).
• Strong fundamentals in Windows/Linux, networking, and DNS.

Responsibilities

• Participates in client penetration testing across networks, AD, web apps, cloud, and Microsoft 365.
• Uses offensve security tools to identify exploitability and validate findings end-to-end.
• Performs authenticated testing with proper approvals and access control.
• Tests web/API security, documents steps and remediation payloads.
• Reviews AI-enabled apps for risks and provides mitigation aligned to OWASP Top 10 for LLM apps.
• Documents workpapers, participates in peer review, and escalates critical findings.
• Produces client deliverables: test plans, technical reports, and executive readouts.

Skills

Penetration testing

Offensive security

Vulnerability assessment

Cloud and M365 security

Scripting/automation

Stakeholder communication

Education

Bachelor’s degree in Cybersecurity, Information Security, or Computer Science

High school diploma or GED

Tools

Kali Linux toolchain

Nessus/Tenable

Nmap

Burp Suite

Metasploit

BloodHound

Job description

BDO USA is seeking a Senior Cyber Security Penetration Tester to perform offensive security testing for clients, define scope, execute testing across network, AD, web apps, cloud, and M365, and communicate results to technical and executive audiences. The role includes red team/purple team exercises with client SOCs, maintains tooling, and contributes to automation.

Strong hands-on skills in Kali, Nmap, Burp Suite, Metasploit, Nessus, and BloodHound are required, with OSCP or equivalents