Cyber Security Penetration Tester

CLA is a top 10 national professional services firm where our purpose is to create opportunities every day, for our clients, our people, and our communities through industry-focused wealth advisory, digital, audit, tax, consulting, and outsourcing services. Even with more than 8,500 people, 130 U.S. locations, and a global reach, we promise to know you and help you.

CLA is currently seeking a Cyber Security Penetration Tester to join our growing Cybersecurity Team.

As a Pen Tester, Your responsibilities will include:

Here’s what you’ll do:

• Network & Application Penetration Testing: Put your ethical hacking skills, problem solving, vulnerability and exploitation knowledge to use by evaluating, testing and scanning to determine weaknesses in client’s IT operations, processes, systems and related controls.  Identify unique issues specific to client’s environment and present solutions based on your findings for business opportunities, risks and needs to the engagement teams.
• Social Engineering: Develop customized social engineering scenarios (email phishing, pre-text phone calls, etc.) and test our client’s employees on their ability to withstand targeted social engineering attacks. Also, evaluate technical controls that are designed to mitigate social engineering attacks (spam filters, web proxies, endpoint security, etc.)
• Conduct Security Assessments:  Perform a variety of internal and external technical assessments), review tactics and processes to protect organizations from threats, interpret findings to determine if systems and processes can appropriately react to threats, identify security settings that may need to be “hardened” and recommend a multi-layered approach to prevent attacks, including proper defense, relationships, communication and training.
• Security Incident Response, Forensic Analysis, Tabletop Testing: Implement response procedures to identify, assesses the nature and scope of breaches and recovers critical systems and data, support and participate in forensic analysis activities, lead and participate in tabletop tests to help clients prepare for disaster events.
• Thrive in a culture that is committed to knowing you and helping you create opportunities for your career, your clients and your community!  You will be encouraged and supported to keep your technical skills sharp through continued research, attending security conferences, certifications and providing thought leadership.

Your experience includes:

• 1+ years of experience and a Bachelor’s or Associates degree in Computer Science, Information Technology or related field OR equivalent experience.
• One or more IT Security Certifications or plans to obtain one, such as OSCP, GWAPT, GPEN, CEH, LPT, CPT, CEPT, etc.
• Programming or scripting experience preferred
• Knowledge of network infrastructure hardware and software preferred, including firewalls, intrusion detection/penetration devices, and servers preferred.
• Knowledge of IT control requirements associated with SOC, FFIEC, GLBA, Sarbanes-Oxley, HIPAA and PCI preferred.
• Knowledge of security audit techniques, processes and services preferred.
• Ability to deliver a high level of client service, including the ability to identify client needs and explain complex concept to non-technical audiences preferred.
• The ability to travel approximately 50%.  Monday- Wed/Thursday travel – no weekends

Our Perks:

• Flexible PTO (designed to offer flexible time away for you!)
• Up to 12 weeks paid parental leave
• Paid Volunteer Time Off
• Mental health coverage
• Quarterly Wellness stipend
• Fertility benefits
• Complete list of benefits here

#LI-RC1

Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities
 
Click here to learn about your hiring rights.

Wellness at CLA

To support our CLA family members, we focus on their physical, financial, social, and emotional well-being and offer comprehensive benefit options that include health, dental, vision, 401k and much more.

To view a complete list of benefits click here.