Job Description

BTVK Advisory is a leading advisory firm whose specialized professionals guide clients through an ever-changing business world, helping them win now and anticipate tomorrow. BTVK Advisory, and its affiliated entities, have operations in North America, South America, Europe, Asia, and Australia. BTVK Advisory’s ultimate parent entity, Baker Tilly US, LLP, is an independent member of Baker Tilly International, a worldwide network of independent accounting and business advisory firms in 141 territories, with 43,000 professionals and a combined worldwide revenue of $5.2 billion.

Baker Tilly is an equal opportunity/affirmative action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability or protected veteran status, gender identity, sexual orientation, or any other legally protected basis, in accordance with applicable federal, state or local law.

To be added to all ET through Experienced requisitions Any unsolicited resumes submitted through our website or to Baker Tilly Advisory Group, LP, employee e-mail accounts are considered property of Baker Tilly Advisory Group, LP, and are not subject to payment of agency fees. In order to be an authorized recruitment agency ("search firm") for Baker Tilly Advisory Group, LP, there must be a formal written agreement in place and the agency must be invited, by Baker Tilly's Talent Attraction team, to submit candidates for review via our applicant tracking system.

Responsibilities:

• Network penetration testing with tools such as Nessus, Nmap, Metasploit.
• Web application testing including advanced usage of Burp Suite Pro.
• TCP/IP networking and ability to troubleshoot connectivity issues.
• Test client's web and/or mobile applications and APIs to expose security weaknesses, being responsible for test quality and resolution of issues that may impede the test effort, for large or complex projects.
• Continuous learning by staying up to date on current testing tools and their applicability to a particular environment.
• Produce penetration testing reports based on testing results.
• Collaborate with program team members to ensure testing runs smoothly.
• Communicate effectively with the penetration testing team.

Qualifications:

• Bachelor’s degree in business administration, cybersecurity, information technology, computer science or other related field or equivalent experience
• 2+ years of experience with TCP/IP networking and attacking endpoints at a network level.
• 2+ years of experience with vulnerability scanning and Penetration Testing
• 2+ years of experience in an internal or external cybersecurity role, or similar (e.g., threat/penetration testing, ethical hacking, OWASP top 10, AppScan)
• Collaborative and able to effectively communicate with a team.
• Desired Certifications: Offensive Security Certified Professional (OSCP), GPEN: GIAC Certified Penetration Tester, OffSec Web Assessor (OSWA), OffSec Web Expert (OSWE), API Security Certified Professional (ASCP), Certified API Security Analyst (CASA)
• Working knowledge of tools such as Burp Suite, Nessus, and the Kali Linux environment
• Experience with cloud penetration testing including K8S, AWS, and Azure
• Testing web applications, APIs, mobile applications, physical security, and social engineering (not all required, but multiple are expected)
• Experience with Dradis a plus and knowledge of vulnerabilities and exploits.