Associate, Compliance Security Penetration Tester

Accountabilities:

• • Conduct security assessments and penetration tests across internal and external networks, web applications, APIs, mobile applications, cloud environments, wireless systems, and other technologies as applicable.
  • Simulate sophisticated cyberattacks to identify vulnerabilities, security weaknesses, and potential compliance gaps.
  • Advise clients on technical security and compliance activities, helping them understand findings and appropriate remediation approaches.
  • Manage assigned priorities, testing activities, and project deliverables while meeting utilization, quality, and timeline expectations.
  • Support engagements from initial scoping through testing, reporting, remediation, and final delivery.
  • Collaborate with project management, quality, sales, and delivery teams to ensure strong customer experiences and successful project outcomes.
  • Assist with engagement scoping, project planning, escalation management, report generation, and quality assurance.
  • Develop and improve penetration testing processes, procedures, methodologies, and supporting documentation.
  • Build and maintain professional relationships with clients and communicate technical findings clearly to both technical and non-technical stakeholders.
  • Continue expanding technical expertise and pursue relevant cybersecurity certifications and professional development.
  • Mentor and support less experienced team members while contributing to broader team objectives and performance.
  • Participate in initiatives that improve testing efficiency, assessment quality, and the overall client experience.

  Requirements:

  • Bachelor’s degree in a relevant discipline or an equivalent combination of education and professional experience.
  • At least 3 years of information security experience, including hands-on web application and network penetration testing.
  • Experience working within enterprise technology environments and a strong understanding of networks, servers, workstations, and applications.
  • Practical scripting experience with languages such as Python, PowerShell, Shell, or Ruby.
  • Experience with one or more security and compliance frameworks, such as PCI, FISMA, HIPAA, FedRAMP, or HITRUST.
  • 1–3 years of experience in IT security auditing and/or compliance-focused work.
  • Ability to interact confidently with management and provide security guidance in a consultative environment.
  • Strong written, verbal, communication, and presentation skills, with the ability to explain complex security concepts effectively.
  • Strong understanding of cybersecurity principles, security policies, and industry best practices.
  • Ability to manage multiple priorities independently while collaborating effectively with distributed teams.
  • Willingness and ability to travel up to 20% as required.
  • A proactive, curious mindset and commitment to continuously developing technical and consulting expertise.
  • Experience leading penetration testing engagements, working directly with clients, or operating in a consulting environment is a strong advantage.
  • Additional value comes from experience with malware reverse engineering, obfuscation, cryptography, C and compiler toolchains, technical security writing, or public security research.
  • Participation in CTFs, Hack The Box, cyber-defense competitions, security conferences, or other cybersecurity communities is a plus.

  Benefits:

  • Salary: $64,000–$117,000 per year, with actual compensation based on factors including experience, education, geographic location, training, licensure, and certifications.
  • Potential eligibility for annual incentive, commission, and/or recognition programs.
  • Flexible work model designed to support effective remote and office-based working arrangements.
  • Comprehensive insurance options to support employees and their families.
  • Paid parental leave.
  • Flexible time off.
  • Certification and professional training reimbursement.
  • Digital mental health and wellbeing support.
  • Employee resource groups and opportunities to participate in virtual and in-person community events.
  • Opportunities for ongoing technical development, industry certifications, and career growth.
  • Collaborative environment focused on cybersecurity expertise, professional development, and meaningful client impact.