Senior Penetration Tester, Cyber Compliance Consultant

CBH

. Lead end-to-end penetration-testing engagements across external and internal networks, web applications, wireless, cloud and social-engineering environments .

Posted 11/5/2026full-timeRemote • United StatesSenior💰 $94,000 - $146,100 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in leading penetration-testing engagements, identifying vulnerabilities, and translating technical findings into actionable business insights. Proficient in managing client relationships, mentoring team members, and ensuring compliance with cybersecurity standards.

Highest-signal resume keywords

Penetration TestingVulnerability ValidationKali LinuxNIST SP 800-53OSCP Certification

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Penetration TestingVulnerability ValidationManual ExploitationCloud Penetration TestingScripting (Python, PowerShell, Bash)

Soft Skills

Client CommunicationTeam MentoringReport Writing

Tools & Technologies

Burp SuiteNmapMetasploitBloodHoundTenable Nessus

Certifications & Qualifications

OSCPPNPTGPENCISSPCISA

Industry Keywords

NIST CSFCMMCISO 27001PCI DSSHIPAA

Tech Stack

Tools & technologies

AWSAzureCloudCyber SecurityLinuxPythonTCP/IP

About the role

Key responsibilities & impact

Lead end-to-end penetration-testing engagements across external and internal networks, web applications, wireless, cloud and social-engineering environments
Scope engagements and manage testing through reporting and remediation validation
Identify and validate vulnerabilities using NIST SP 800-115, OWASP and hands-on testing
Translate technical findings into actionable business insights and prioritized remediation recommendations
Lead client interviews, status meetings, technical readouts and report-delivery conversations
Evaluate technical and administrative controls for cybersecurity risk, compliance and control-testing engagements
Support readiness, gap and compliance engagements involving NIST CSF, NIST SP 800-53/171, CMMC, FedRAMP, ISO 27001, PCI DSS, HIPAA/HITRUST, FFIEC and AICPA SOC 2
Develop penetration-testing methodologies, automation, secure testing infrastructure and service offerings
Contribute to emerging work such as adversarial AI and LLM testing
Coach junior team members and review testing documentation and reports
Manage scope, schedules, budgets and competing priorities across client engagements

Requirements

What you’ll need

Bachelor’s degree in Cybersecurity, Information Security, Information Systems, Computer Science, Management Information Systems or a related discipline
2+ years of relevant experience, including substantial penetration-testing experience
Ability to independently scope, execute and document penetration-testing engagements
Manual vulnerability validation and exploitation beyond automated scanning
Proficiency with Kali Linux and offensive-security tools including Burp Suite, Nmap, Metasploit, BloodHound, Impacket, Responder and Tenable Nessus
Working knowledge of Windows and Linux, Active Directory, TCP/IP networking, authentication protocols, web technologies, and Microsoft Azure or AWS
Ability to produce technically accurate reports and communicate findings to technical and nontechnical stakeholders
Experience reviewing workpapers, mentoring team members and leading client-facing consulting engagements
Ability to travel based on client needs, generally not expected to exceed 25%
Candidates must demonstrate eligibility to work in the United States
Cherry Bekaert will not provide work sponsorship for this position
Preferred: OSCP, PNPT, GPEN, GWAPT, CRTO or comparable hands-on penetration-testing certification
Preferred: CISSP, CISA, CISM, CCSK, ISO 27001 Lead Auditor/Implementer or comparable governance/compliance credential
Preferred: Experience with Python, PowerShell or Bash scripting
Preferred: Experience with cloud penetration testing, assumed-breach testing, purple-team exercises, adversarial AI testing or custom security-tool development

Benefits

Comp & perks

Competitive compensation and a total rewards package
Annual bonus
Medical, dental, and vision care
Disability and life insurance
Generous Paid Time Off
Retirement plans
Paid Care Leave
Professional development and career growth opportunities
Flexible work arrangements
Opportunities to connect and learn from professionals from different backgrounds and cultures