Lead Consultant - Penetration Testing

Forvis Mazars LLP is a leading provider of cybersecurity consulting services, dedicated to helping organizations improve their security programs. We are seeking a highly skilled and motivated penetration testing lead consultant to join our team and lead pen testing engagements.

The ideal candidate will have at least 4 years of experience performing penetration testing including use of tools and manual processes. They will also possess a fundamental understanding of web application programming, TCP/IP, network design architecture, and have the capacity to learn requirements necessary to sustain our client engagements. The responsibilities that you will be given will make the most of your strengths and challenge you to develop new skills.

Forvis Mazars has opportunities for professional development and certifications as well as a flexible work environment and remote work options.

How you will contribute:

• Consulting Services: Perform web application testing, manual pen testing, automated pen testing, vulnerability scanning, and maintain good documentation of the exploit chain
• Client Engagement: Build and maintain strong relationships with clients, understanding their needs and ensuring their satisfaction with our services
• Team Leadership: Lead and mentor other members of the team, providing direction and support to ensure high-quality service delivery
• Continuous Improvement: Stay up to date with the latest cyber and testing methodologies and industry best practices, continuously improving our services
• Reporting: Prepare and present detailed reports on findings, methodology, and remediation recommendations to clients and internal stakeholders
• Risk Management: Identify and assess security risks, providing actionable recommendations to mitigate risks and enhance overall security posture

We are looking for people who have Forward Vision and:

• Excellent project management and organizational skills
• Strong analytical and problem-solving abilities
• Exceptional communication and interpersonal skills
• Ability to work independently and as part of a team

Minimum Qualifications:

• A degree in Computer Information Systems, Computer Science, Business Information Systems or related fields
• Programming experience in Python, PHP, Perl, Ruby, .NET or other interpreted or compiled languages
• Working with technical security controls for 4+ years
• Familiarity with vulnerability assessment and penetration tools and techniques
• Pen testing certification(s) required including OSCP, CEH, CPT, LPT, GPEN, PenTest+ or must obtain one or more security-related certifications within the first year of hire
• Experience with vulnerability scanning tools and technologies
• Ability to travel up to 25%