Senior Penetration Tester & Cyber Compliance Consultant
Core
Lead offensive-security engagements including penetration testing and cybersecurity compliance consulting for clients.
Role type
Senior IC penetration tester & cyber compliance consultant
Builds
Penetration testing reports, compliance gap analyses, and remediation recommendations
Domain
Cybersecurity / Professional Services
Required skills
Manual penetration testing, vulnerability validation, NIST SP 800-115/OWASP methodologies, Kali Linux, Burp Suite, Nmap, Metasploit, BloodHound, Impacket, Responder, Tenable Nessus, Windows/Linux/Active Directory, cloud platforms (Azure/AWS), technical reporting, client advisory
Preferred skills
Python/PowerShell/Bash scripting, adversarial AI/LLM testing, cloud penetration testing, purple-team exercises, custom tool development
Technologies
Kali Linux, Burp Suite, Nmap, Metasploit, BloodHound, Impacket, Responder, Tenable Nessus, Microsoft Azure, AWS
Responsibilities
Lead end-to-end penetration testing engagements (external/internal networks, web apps, wireless, cloud, social engineering), identify and validate vulnerabilities via hands-on testing, translate technical findings into business insights for stakeholders, serve as client-facing advisor for compliance engagements (NIST CSF, CMMC, FedRAMP, ISO 27001, PCI DSS, HIPAA/HITRUST, FFIEC, SOC 2), develop testing methodologies and automation, coach junior team members
Seniority
Senior, hands-on IC
