> Markdown version of [/jobs/ext/4628697-senior-penetration-tester-cyber-compliance-consultant](https://www.wearedevelopers.com/jobs/ext/4628697-senior-penetration-tester-cyber-compliance-consultant). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior Penetration Tester & Cyber Compliance Consultant

- **Company:** Cherry Bekaert LLP
- **Location:** Providence, RI, United States
- **Experience:** Expert
- **Salary:** $94,000.0 - $146,100.0
- **Contract:** Permanent contract
- **Skills:** Active Directory, Artificial Intelligence, Amazon Web Services, Software System Penetration Testing, Authentication Protocols, Microsoft Azure, Bash Shell, Burp Suite, Cloud Computing, Cyber Security, Information Systems, Linux, Python (Programming Language), Kali Linux, Nmap, Open Web Application Security, PCI Data Security Standards, Windows PowerShell, Transmission Control Protocol (TCP), Web Applications, National Institute of Standards and Technology Cybersecurity Framework, GWAPT, Information Technology, Metasploit, Tenable Nessus, Web Technologies
- **Published:** November 7, 2026
- **Apply:** https://dejobs.org/x/x/240824A338374A7DB7E713133DC1D32A/job/

## About the Role

* Bachelor's degree in Cybersecurity, Information Security, Information Systems, Computer Science, Management Information Systems or a related discipline
 * 2+ years of relevant experience, including substantial penetration-testing experience with the ability to independently scope, execute and document engagements, including manual validation and exploitation beyond automated scanning
 * Demonstrated proficiency with Kali Linux and offensive-security tools such as Burp Suite, Nmap, Metasploit, BloodHound, Impacket, Responder and Tenable Nessus
 * Working knowledge of Windows and Linux, Active Directory, TCP/IP networking, authentication protocols, web technologies, and cloud platforms such as Microsoft Azure or AWS
 * Ability to translate complex vulnerabilities into clear, technically accurate reports and communicate findings effectively to both technical and nontechnical stakeholders
 * Experience reviewing workpapers, mentoring team members and leading client-facing consulting engagements
 * Ability to travel based on client needs, generally not expected to exceed 25%

Additional, preferred qualifications:

 * OSCP, PNPT, GPEN, GWAPT, CRTO or a comparable hands-on penetration-testing certification
 * CISSP, CISA, CISM, CCSK, ISO 27001 Lead Auditor/Implementer or a comparable governance or compliance credential
 * Experience with Python, PowerShell or Bash scripting
 * Experience with cloud penetration testing, assumed-breach testing, purple-team exercises, adversarial AI testing or custom security-tool development, Candidates must demonstrate eligibility to work in the United States. Cherry Bekaert will not provide work sponsorship for this position.

## Description

As a Senior Penetration Tester & Cyber Compliance Consultant, you will:

 * Lead end-to-end penetration testing engagements spanning external and internal networks, web applications, wireless, cloud and social-engineering environments, from scoping through reporting and remediation validation.
 * Identify and validate vulnerabilities through hands-on testing, applying methodologies and industry guidance including NIST SP 800-115 and OWASP, rather than relying solely on automated scanner results.
 * Turn technical findings into actionable business insights, developing evidence-based reports and prioritized remediation recommendations for technical teams, management and executives.
 * Serve as a trusted client-facing advisor, leading interviews, status meetings, technical readouts and report-delivery conversations while building strong client relationships.
 * Apply your technical expertise to cybersecurity compliance, evaluating technical and administrative controls and supporting readiness, gap and compliance engagements involving frameworks such as NIST CSF, NIST SP 800-53/171, CMMC, FedRAMP, ISO 27001, PCI DSS, HIPAA/HITRUST, FFIEC and AICPA SOC 2.
 * Advance our penetration-testing capabilities by helping develop testing methodologies, automation, secure testing infrastructure and service offerings, including emerging areas such as adversarial AI and LLM testing.
 * Help develop the next generation of cybersecurity talent by coaching junior team members and reviewing testing documentation and reports, while managing scope, schedules, budgets and competing priorities across client engagements.