General informationName Lead Consultant, Penetration Testing
Posting Title Lead Consultant, Penetration Testing
Ref # 2237821
Date Published Friday, October 30, 2026
City Charlotte
State North Carolina
Country United States
Job Category Risk Advisory
Advertised Location US-GA-Atlanta, US-MO-Kansas City, US-MO-Springfield, US-NC-Charlotte, US-NC-Charlotte, US-NC-Raleigh, US-TN-Nashville, US-TX-Austin, US-TX-Dallas, US-TX-Houston, US-VA-Tysons
Working time Full Time
Description & RequirementsWhat You Will Do:
- Perform network and web application testing, including manual pen testing, automated pen testing, vulnerability scanning, and maintain good documentation of the exploit chain, with periodic support for operational technology (OT), IoT, and SCADA/ICS assessments
- Build and maintain strong relationships with clients, understanding their needs and ensuring their satisfaction with our services
- Lead and mentor other members of the team, providing direction and support to ensure high-quality service delivery
- Stay up-to-date with the latest cyber and testing methodologies and industry best practices, continuously improving our services
- Prepare and present detailed reports on findings, methodology, and remediation recommendations to clients and internal stakeholders
- Identify and assess security risks, providing actionable recommendations to mitigate risks and enhance overall security posture
Minimum Qualifications:- A Bachelor's degree in Computer Information Systems, Computer Science, Business Information Systems or related fields
- 4 years or more of experience performing penetration testing including use of tools and manual processes
Preferred Qualifications:- Exposure to OT, IoT, or SCADA/ICS environments and industrial protocols such as Modbus or DNP3 is a plus
- Familiarity with vulnerability assessment and penetration tools and techniques
- Pen testing certification(s) required including OSCP, OSEP, OSWA, or OSWE or GPEN, or must obtain one or more security-related certifications within the first year of hire; OT/ICS certifications such as GRID or GICSP are a plus
- Possess a fundamental understanding of web application programming, TCP/IP, network design architecture, and have the capacity to learn requirements necessary to sustain our client engagements
- Experience with vulnerability scanning tools and technologies
- Ability to travel up to 25%
#LI-ATL, #LI-KCMO, #LI-SGF, #LI-CLTSP, #LI-CLTU, #LI-RAL, #LI-NASH, #LI-AUS, #LI-DFW, #LI-HOU, #LI-TYS
#LI-GM1
