Senior Penetration Tester & Cyber Compliance Strategist

C010 Cherry Bekaert Advisory LLC; Rhode Island; On-site; USD 94,000 - 146,000; Full time

Benefits offered by this job

Annual bonus

Medical, dental, and vision care

Disability and life insurance

Generous Paid Time Off

Retirement plans

Paid Care Leave

Job summary

Cherry Bekaert Advisory LLC in the United States seeks a Senior Penetration Tester & Cyber Compliance Consultant to lead offensive-security engagements and contribute to risk, compliance and control-testing initiatives.

You will manage end-to-end engagements across networks, web apps, cloud, and social-engineering environments, translating technical findings into actionable business guidance for clients and executives.

Qualifications

• Bachelor’s degree in cybersecurity or a related field with at least 2 years of penetration-testing experience.
• Ability to scope, execute and document engagements with hands-on validation beyond automated scanning.
• Experience translating technical findings into business-ready remediation reports.

Responsibilities

• Lead end-to-end penetration testing engagements across networks, apps, cloud and social-engineering environments from scoping to remediation validation.
• Identify vulnerabilities through hands-on testing using industry-standard methodologies.
• Produce evidence-based reports for technical teams, management and executives.
• Engage with clients as a trusted advisor through interviews, status meetings and readouts.
• Support cybersecurity compliance and readiness projects across multiple frameworks.

Skills

Penetration testing

Executive-level client-facing comm.

Report writing and remediation

Mentoring junior team

Travel up to 25%

Education

Bachelor's degree in Cybersecurity or related field

Tools

Kali Linux

Burp Suite

Nmap

Metasploit

BloodHound

Impacket

Responder

Tenable Nessus

Windows

Linux

Job description

Cherry Bekaert Advisory LLC in the United States seeks a Senior Penetration Tester & Cyber Compliance Consultant to lead offensive-security engagements and contribute to risk, compliance and control-testing initiatives.

You will manage end-to-end engagements across networks, web apps, cloud, and social-engineering environments, translating technical findings into actionable business guidance for clients and executives.