Cybersecurity Senior

UHY is seeking a Cybersecurity Senior to join our Cybersecurity, Risk, and Compliance practice. This role is responsible for supporting and executing client engagements focused on penetration testing, technical security assessments, cybersecurity risk assessments, control evaluations, compliance readiness, and related advisory services. The ideal candidate will have at least two years of relevant cybersecurity experience, including hands‑on penetration testing experience, a strong technical foundation, and an interest in consulting and client service.

Project Objectives:

• Our practice works with clients across a variety of industries to assess and improve their cybersecurity programs through technical security testing, cybersecurity assessments, and recognized frameworks and standards, including NIST, PCI DSS, CIS Controls, and other leading practices.
• Hands‑on penetration testing and technical assessment experience Experience performing network, web application, wireless, cloud, and/or internal security assessments. Candidates should have direct experience conducting security testing activities, identifying vulnerabilities, validating findings, and developing remediation recommendations.
• Strong cybersecurity and technical foundation Understanding of networking, operating systems, Active Directory, authentication protocols, cloud technologies, and common attack techniques. Comfortable discussing both technical findings and associated business risks.
• Knowledge of key frameworks Experience with NIST CSF, NIST 800-53, NIST 800-171, CMMC, PCI DSS, CIS Controls, OWASP, MITRE ATT&CK, or similar standards and methodologies.
• Consulting and client communication skills Able to communicate with clients, gather information, explain technical findings clearly, and present recommendations to both technical and executive audiences.
• Strong documentation and attention to detail Ability to create thorough testing work papers, technical reports, executive summaries, spreadsheets, and recommendations that are accurate, well‑supported, and client‑ready.
• Ability to manage multiple priorities Comfortable working across different client engagements, deadlines, meetings, testing activities, reporting requirements, and follow‑up tasks in a fast‑paced environment.

Engagement Tasks:

• Performs network, web application, wireless, cloud, and other cybersecurity assessments and penetration testing engagements.
• Assists with vulnerability validation, exploitation testing, attack path analysis, and security control evaluations in support of client engagements.
• Gathers and documents business requirements, testing plans, testing results, configuration reviews, technical observations, and any other deliverables required by the project as determined by management.
• Develops technical reports, executive summaries, remediation recommendations, and client deliverables consistent with leading practices.
• Adheres to established testing methodologies, firm standards, and leading industry practices in all deliverables.
• Establishes strong relationships with clients and serves as a trusted advisor throughout engagements.
• Manages segments of projects independently while being involved in multiple projects simultaneously.
• Keeps project teams informed regarding the status of assigned responsibilities, identified risks, findings, and project milestones.
• Responds to all clients with a sense of urgency, escalating matters or managing up as necessary.
• Achieves firm, team, and organizational metrics (e.g., utilization and realization).

Required

Education and Experience:

• Bachelor's degree in Cybersecurity, Information Systems, Information Technology, Computer Science, Accounting Information Systems, or a…