Ethical Hacker - Senior Consultant

Forvis Mazars is a leading global professional services network providing audit & assurance, tax, and advisory services. Forvis Mazars in the UK spans 14 offices across the nation and has over 3,400 professionals, with 190 partners. We have a clear purpose and a shared commitment to shape a better future.

You'll join a collaborative and inclusive team where you're supported to grow your skills, explore new opportunities, and contribute from day one. You'll work with a diverse client base, develop meaningful connections, and gain experience that extends beyond your local team. Together, we grow, belong and impact.

About The Team The Cyber Advisory team provides cyber security assurance, advice and guidance to clients on all aspects to help them build and maintain a robust security environment. We identify cyber risks and work closely with clients to understand their unique set of digital opportunities and challenges, providing tailored and strategic advice and guidance.

We support our clients in assessing, building and managing their cyber security capabilities, from ensuring compliance with industry regulations, and mitigating potential risks to moving them towards a more mature security posture.

Responsibilities As a Manager within the national cyber security team you will be responsible for delivering cyber security assurance and advisory work to a range of clients nationally and internationally. Our broad range of clients, including those in FTSE 350, will allow you to gain experience across a range of sectors including:

• Financial Services, Banking, Insurance and Investment
• Corporates/Private Sector/Industry & Services
• Central and Local Government
• Retail and Consumer products organisations

About The Role As a Senior Penetration Tester, you'll lead complex security engagements across infrastructure, cloud, mobile, AI systems, and more. You will design and execute red team operations, mentor junior consultants, and directly influence our technical testing capability and methodology as we progress towards CHECK and CREST STAR accreditations. This role is suited for experienced professionals ready to push the boundaries of ethical hacking and adversary simulation. Role & Responsibilities

• Deliver and lead red team, purple team, and assumed breach, infrastructure, and applications assessments across multiple sectors.
• Emulate real-world attack scenarios using custom tooling and TTPs aligned with MITRE ATT&CK.
• Develop comprehensive and accurate reports and presentations for both technical and executive audiences.
• Interface with clients to address concerns, issues, or escalations; track and drive to closure any issues that impact the service and its value to clients.
• Working with clients to develop appropriate remediation plans.
• Providing thought leadership and direction for the Cyber Security practice on malware, attack vectors and methods to protect against threats.
• Helping recruit, retain and develop the Ethical Hacking team by bringing superior leadership skills.
• Training and mentoring of graduate entry colleagues through the sharing of professional and technical skills and experience.
• Carry out research when not on client deliverable work that can be used to enhance our services to clients.
• Work with teams across the business, providing the latest technical knowledge to collaborate on interesting client projects.

What We Are Looking For The following are expected from potential applicants:

• Experience with red teaming, purple teaming, and social engineering techniques.
• Application, Infrastructure and Cloud penetration testing experience above and beyond running automated tools.
• A good understanding of Unix, Microsoft Windows, and network security skills.
• Excellent written and communication skills in English.
• Ability to work both independently and collaboratively in a team.
• Developing applications in one or more of the following: C#, ASP, .NET, Objective-C, Go, or Java (J2EE).
• CSTM / CRT / CSTL / CCT-INF / CCT-APP / OSEP / OSWE / CRTO / CRTO II
• On the pathway to: CCSAM / CCSAS / CCRTS / CSRTM
• Working knowledge of Azure AD, Office 365, and common cloud hosting platforms.
• A degree in a STEM related subject including computer security, computer science, or equivalent experience.

Advantageous

• Mobile application, IoT and/or OT testing experience.
• Experience testing AI models or LLM-based applications for adversarial attacks.
• Research and Development experience.
• Threat Intelligence and Malware Development experience.
• Ability to work both independently and perform as a team member in a group environment.
• Red team operations and purple team delivery, including adversary emulation.

Diversity, Equity & Inclusion At Forvis Mazars diversity, equity and inclusion are central to our values. We value our people's unique backgrounds, perspectives, and experience, and know this diversity create better outcomes for our clients. We seek to attract, develop, and retain the best talent, inclusive of sex, ethnicity, disability, socio-economic background, sexual orientation, gender identity, nationality, and faith. We select candidates based on skills, knowledge, qualifications, and experience and aim to support all our team members to reach their potential. At Forvis Mazars, we promote an environment in which you can grow your skills, belong to a team that values your ideas, and make an impact that matters.