Cybersecurity Senior Penetration Tester

Job Title

Cybersecurity Penetration Tester

Job Description

As a member of the Elliott Davis Digital Cyber team, you will be responsible for having an in-depth knowledge of ethical hacking techniques and countermeasures to provide a variety of cybersecurity services to our clients. Our goal is to help protect our client's cybersecurity with the services we provide.

Responsibilities

- Execute internal and external penetration tests against enterprise environments, including network, web application, API, mobile, wireless, and cloud-hosted systems, using industry-standard commercial and open-source tools

- Perform open-source intelligence (OSINT) reconnaissance to support attack surface mapping and social engineering simulations

- Conduct wireless security assessments, including WPA2/3 testing, rogue access point detection, and segmentation validation

- Perform internal configuration reviews and vulnerability assessments, identifying attack paths, privilege escalation opportunities, and systemic security weaknesses

- Document findings clearly and accurately, including risk ratings, exploitation evidence, business impact, and actionable remediation guidance

- Collaborate with peers through technical peer review and quality assurance processes to ensure consistency and accuracy of deliverables

- Stay current with emerging vulnerabilities, attack techniques, and tooling through ongoing research and hands-on lab work

Requirements

- A Bachelor's degree in Cybersecurity, Information Security, Computer Science, Information Systems, Computer Engineering, or a closely related technical field

- 4+ years of hands-on penetration testing experience, preferably in a client-facing consulting environment

- Demonstrated experience performing network, web application, API, vulnerability, and cloud security assessments

- One or more current penetration testing certifications (e.g., OSCP, eCPPT, GPEN, OSWE, GWAPT, eWPT, PNPT)

- Strong analytical and problem-solving skills with the ability to think like an attacker and assess real-world risk

- Familiarity with common security and compliance frameworks (PCI DSS, HIPAA, NIST, CIS, ISO 27001)

- Ability to manage multiple engagements concurrently while maintaining high-quality client deliverables

- Strong technical writing and presentation skills, with the ability to communicate effectively to both technical and non-technical audiences

- Comfortable working in a collaborative team environment with peer review and shared ownership of outcomes

- Willingness to support after-hours testing as required by client engagements

- Patience, flexibility, and a sense of humor are a must

Notice to 3rd Party Recruiters: Resumes submitted or candidates referred to any employee of Elliott Davis by any external recruiter or recruitment agency by any means without a properly executed written contract for a specified position by an authorized member of the Talent Acquisition team become the property of Elliott Davis. Elliott Davis will not be responsible for, or owe any fees associated with, referrals of those candidates and/or for submission of any information, including resumes, associated with individuals.

ADA Requirements: Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

Physical Requirements: While performing the duties of this job, the employee is regularly required to remain in a stationary position; use hands repetitively to operate standard office equipment; and to talk or hear, both in person and by telephone. Required to have specific vision abilities which include close vision, distance vision, color vision, peripheral vision, depth perception, and the ability to adjust focus.

Cognitive/Mental Requirements: While performing the duties of this job, the employee is regularly required to use written and oral communication skills. Read and interpret data, information, and documents. Observe and interpret situations. Work under deadlines with frequent interruptions; and interact with internal and external customers and others in the course of work.