Cybersecurity Consultant - Pen Tester

Plante Moran - Denver, CO

Full-time - Entry Level

Denver, CO

Professional, Scientific, and Technical Services

About the position

As a Cybersecurity Consultant specializing in Penetration Testing at Plante Moran, you will play a crucial role in enhancing our clients' cybersecurity posture. Your responsibilities will encompass a variety of tasks aimed at identifying vulnerabilities and providing actionable insights to improve security measures. You will perform penetration testing across multiple environments, including external and internal networks, wireless systems, web applications, and mobile platforms. Additionally, you will conduct vulnerability assessments and social engineering assessments, such as phishing and physical impersonation tests. Your technical expertise will also extend to reviewing security configurations for systems like Microsoft 365, firewalls, and routers. In this role, you will actively participate in client meetings, presenting your technical findings in a clear and understandable manner to IT staff and management. Collaboration is key, as you will work closely with other cybersecurity teams to coordinate client projects and ensure comprehensive service delivery. Your consulting skills will be applied not only in client engagements but also in supporting practice development efforts and assisting in proposal and engagement development. At Plante Moran, we value diversity, equity, and inclusion, ensuring that all staff members have equitable opportunities to succeed in an inclusive environment. Our flexible “Workplace for Your Day” model allows you to work with your supervisor and team to determine the optimal working environment each day, balancing in-person interactions with remote work as needed. This position offers a unique opportunity to grow your skills in a supportive and dynamic environment while making a significant impact on our clients' cybersecurity strategies.

Responsibilities

• Perform penetration testing for various client projects, including external and internal networks, wireless systems, web applications, and mobile platforms.
• Conduct vulnerability assessments to identify security weaknesses in client systems.
• Execute social engineering assessments, including phishing, vishing, and physical impersonation tests.
• Review technical security configurations for systems such as Microsoft 365, firewalls, and routers.
• Participate in client meetings and present technical findings to IT staff and management in an understandable manner.
• Collaborate with other cybersecurity teams to coordinate client projects effectively.
• Engage with other practice areas, including audit, tax, and management consulting service groups.
• Apply consulting skills to support practice development efforts.
• Assist in the development of proposals and client engagements.

Requirements

• Bachelor's Degree in IT Security, Management Information Systems, Information Security/Assurance, Computer Science, or a related field.
• Experience with multiple operating systems, including Windows and Linux.
• Proficiency in penetration and vulnerability testing tools such as Metasploit, Burp Suite, and CrackMapExec.
• Strong desire to provide excellent client service and expand offensive security knowledge and skills.
• Excellent verbal and written communication skills.
• Strong time management and organizational skills.
• Willingness to travel approximately 25% overnight, although firm travel is currently limited.

Nice-to-haves

• Certifications such as eJPT, eCPPT, CEH, GPEN, and/or OSCP.
• 1-4 years of relevant professional experience in penetration testing, vulnerability assessments, or technical security assessments.
• Experience operating in blue team/SOC or IT environments.
• Hands-on experience with penetration testing labs like HacktheBox, Try Hack Me, and VulnHub.

Benefits

• Flexible work environment with a focus on work-life balance.
• Supportive culture with a focus on professional development and growth opportunities.
• Recognition as one of FORTUNE magazine's '100 Best Companies to Work For'.
• Low staff turnover rate, indicating a positive workplace culture.