Senior Penetration Tester & Cyber Compliance Consultant

Ranked among the largest accounting and consulting firms in the country and consistently recognized as a Great Place to Work, Cherry Bekaert delivers innovative advisory, assurance and tax services to our clients. At Cherry Bekaert we create shared success through teamwork, energy, and expertise. We approach today’s toughest business challenges with a client-first mindset, working together to create exceptional value. We are all committed to making a difference for our people, our clients, our community, and our professions. To meet this commitment, Cherry Bekaert will provide you with the space to pursue growth and development opportunities that will guide and support you at each stage of your personal and professional journey.

If you’re equally comfortable breaking into systems, explaining the business impact of what you find and helping clients strengthen their security posture, this could be your next opportunity. Cherry Bekaert’s Cybersecurity Services practice is seeking a Senior Penetration Tester & Cyber Compliance Consultant to lead sophisticated offensive-security engagements while contributing to cybersecurity risk, compliance and control-testing initiatives.

As a Senior Penetration Tester & Cyber Compliance Consultant, you will:

• Lead end-to-end penetration testing engagements spanning external and internal networks, web applications, wireless, cloud and social-engineering environments, from scoping through reporting and remediation validation.
• Identify and validate vulnerabilities through hands-on testing, applying methodologies and industry guidance including NIST SP 800-115 and OWASP, rather than relying solely on automated scanner results.
• Turn technical findings into actionable business insights, developing evidence-based reports and prioritized remediation recommendations for technical teams, management and executives.
• Serve as a trusted client-facing advisor, leading interviews, status meetings, technical readouts and report-delivery conversations while building strong client relationships.
• Apply your technical expertise to cybersecurity compliance, evaluating technical and administrative controls and supporting readiness, gap and compliance engagements involving frameworks such as NIST CSF, NIST SP 800-53/171, CMMC, FedRAMP, ISO 27001, PCI DSS, HIPAA/HITRUST, FFIEC and AICPA SOC 2.
• Advance our penetration-testing capabilities by helping develop testing methodologies, automation, secure testing infrastructure and service offerings, including emerging areas such as adversarial AI and LLM testing.
• Help develop the next generation of cybersecurity talent by coaching junior team members and reviewing testing documentation and reports, while managing scope, schedules, budgets and competing priorities across client engagements.

What you bring to the role:

• Bachelor’s degree in Cybersecurity, Information Security, Information Systems, Computer Science, Management Information Systems or a related discipline
• 2+ years of relevant experience, including substantial penetration-testing experience with the ability to independently scope, execute and document engagements, including manual validation and exploitation beyond automated scanning
• Demonstrated proficiency with Kali Linux and offensive-security tools such as Burp Suite, Nmap, Metasploit, BloodHound, Impacket, Responder and Tenable Nessus
• Working knowledge of Windows and Linux, Active Directory, TCP/IP networking, authentication protocols, web technologies, and cloud platforms such as Microsoft Azure or AWS
• Ability to translate complex vulnerabilities into clear, technically accurate reports and communicate findings effectively to both technical and nontechnical stakeholders
• Experience reviewing workpapers, mentoring team members and leading client-facing consulting engagements
• Ability to travel based on client needs, generally not expected to exceed 25%

Additional, preferred qualifications:

• OSCP, PNPT, GPEN, GWAPT, CRTO or a comparable hands-on penetration-testing certification
• CISSP, CISA, CISM, CCSK, ISO 27001 Lead Auditor/Implementer or a comparable governance or compliance credential
• Experience with Python, PowerShell or Bash scripting
• Experience with cloud penetration testing, assumed-breach testing, purple-team exercises, adversarial AI testing or custom security-tool development

What you can expect from us:

• Our shared values that foster inclusion and belonging including uncompromising integrity, collaboration, trust, and mutual respect

• The opportunity to innovate and do work that motivates and engages you

• A collaborative environment focused on enabling you to further your career growth and continuous professional development

• Competitive compensation and a total rewards package that focuses on all aspects of your wellbeing

• Flexibility to do impactful work and the time to enjoy your life outside of work

• Opportunities to connect and learn from professionals from different backgrounds and with different cultures

Benefits Information:

Cherry Bekaert cares about our people. We offer competitive compensation packages based on performance that recognize the value our people bring to our clients and our Firm. The salary range for this position is included below. Individual salaries within this range are determined by a variety of factors including but not limited to the role, function and associated responsibilities, a candidate’s work experience, education, knowledge, skills, and geographic location. In addition, we offer a comprehensive, high-quality benefits program which includes annual bonus, medical, dental, and vision care; disability and life insurance; generous Paid Time Off; retirement plans; Paid Care Leave; and other programs that are dedicated to enhancing your personal and work life and providing you and your family with a measure of financial protection.

Pay Range:

About Cherry Bekaert

Cherry Bekaert, ranked among the largest assurance, tax and advisory firms in the U.S., serves clients across industries in all 50 U.S. states and internationally. For more details, visit https://www.cbh.com/disclosure/ 

Cherry Bekaert provides equal employment opportunities to applicants and employees without regard to race, color, religion, age, sex, sexual orientation, gender identity/expression, national origin, citizenship status, protected veteran status, disability status, or any other category protected by applicable federal, state or local laws. https://careers.cbh.com/legal-disclosures/ contains further information regarding the firm's compliance with federal, state and local recruitment and hiring laws. 

This role is expected to accept applications for at least five calendar days and may continue to be posted until a qualified applicant is selected or the position has been cancelled.   

Candidates must demonstrate eligibility to work in the United States. Cherry Bekaert will not provide work sponsorship for this position. 

Cherry Bekaert LLP and Cherry Bekaert Advisory LLC are members of Allinial Global, an accountancy and business advisory global association. Visit us at  https://careers.cbh.com/ and follow us on LinkedIn, Instagram, Twitter and Facebook.  

© 2026 Cherry Bekaert. All Rights Reserved.