We are the leading provider of professional services to the middle market globally, our purpose is to instill confidence in a world of change, empowering our clients and people to realize their full potential. Our exceptional people are the key to our unrivaled, inclusive culture and talent experience and our ability to be compelling to our clients. You’ll find an environment that inspires and empowers you to thrive both personally and professionally. There’s no one like you and that’s why there’s nowhere like RSM.
Responsibilities:
Conduct assessments identify risks within an organizations cyber security governance compliance programs
Measure and report clients’ compliance with established industry or National/International government requirements such as PCI DSS, CMMC, FEDRAMP, GDPR, CCPA, etc.
Perform analysis and testing to verify the strengths and weaknesses of mobile and web applications and web services (SOAP, WSDL, UDDI)
Perform Internet penetration testing using blackbox and whitebox methodologies
Review application code, system configurations and device configurations using manual and automated techniques
Communicate technical findings to a non-technical audience effectively
Create and review threat intelligence programs for clients using established intelligence models
Work with a variety of cyber security and privacy frameworks such as ISO, NIST, CIS.
Support the development and implementation of tools such as eGRC, used to help manage security programs across a variety of organizations
Develop target operating models for cyber security programs including budgets, resource levels, reporting structure, etc.
Required Qualifications:
Bachelor's degree or equivalent experience
Strong knowledge of computer network technologies, protocols/topologies, digital forensics and endpoint protection, or threat intelligence
Software development, programming and/or scripting experience (Perl, Python, C, Java, PHP, ASP, etc.)
Ability to track threat actors across Dark Web criminal forums and marketplaces and ability to communicate findings
Ability to track malware campaigns and understand adversarial activity from an intelligence perspective
Basic understanding of intelligence, including intelligence lifecycle, Kill Chain, Diamond model, and Priority Intelligence Requirements
High degree of integrity and confidentiality, as well as ability to adhere to company policies and best practices
0 – 2 years of relevant experience
Preferred Qualifications:
Practical hands-on or lab experience with IT infrastructure components such as servers, firewalls, IDS systems and other network infrastructure components
Practical hands-on or lab experience with security applications, such as a AppScan, Metasploit, BurbSuite, Nessus, Social Engineering Toolkit, Kali Linux, etc., or other commercial and public domain security tools
Operating system configuration and security experience (HP-UX, Linux, Solaris, AIX, etc.) Configuration and security experience with web servers and web applications (Apache HTTP/Tomcat, Microsoft IIS, Sun One, Oracle iPlanet, IBM WebSphere, etc.)
Database Configuration and Security experience (MySQL, Microsoft SQL, IBM DB2, Sybase, Oracle, etc.)
Familiar with security testing techniques such as network discovery, port and service identification, vulnerability scanning, network sniffing, fuzzing, penetration testing, configuration reviews, firewall rule reviews, social engineering, wireless penetration testing and password cracking Internship or overall experience with threat intelligence vendor or familiarity with various threat intelligence tools and platforms
At RSM, we offer a competitive benefits and compensation package for all our people. We offer flexibility in your schedule, empowering you to balance life’s demands, while also maintaining your ability to serve clients. Learn more about our total rewards at https://rsmus.com/careers/working-at-rsm/benefits https://rsmus.com/careers/el-salvador.html.
RSM does not tolerate discrimination and/or harassment based on race; colour; creed; sincerely held religious beliefs, practices or observances; sex (including pregnancy or disabilities related to nursing); gender (including gender identity and/or gender expression); sexual orientation; HIV Status; national origin; ancestry; familial or marital status; age; physical or mental disability; citizenship; political affiliation; medical condition (including family and medical leave); domestic violence victim status; past, current or prospective service in the Salvadoran Military/Veteran status; pre-disposing genetic characteristics or any other characteristic protected under applicable provincial employment legislation.
Accommodation for applicants with disabilities is available upon request in connection with the recruitment process and/or employment/partnership. RSM is committed to providing equal opportunity and reasonable accommodation for people with disabilities. If you require a reasonable accommodation to complete an application, interview, or otherwise participate in the recruiting process, please send us an email at [email protected].
Skills Required
- Bachelor's degree or equivalent experience
- Strong knowledge of computer networks, protocols, digital forensics, endpoint protection, or threat intelligence
- Software development, programming, or scripting experience
- Ability to track threat actors across dark web forums and marketplaces and communicate findings
- Ability to track malware campaigns and understand adversarial activity
- Basic understanding of intelligence lifecycle, Kill Chain, Diamond Model, and Priority Intelligence Requirements
- High integrity, confidentiality, and adherence to company policies and best practices
- 0–2 years of relevant experience
- Hands-on or lab experience with servers, firewalls, IDS systems, and network infrastructure
- Hands-on or lab experience with security testing tools such as AppScan, Metasploit, Burp Suite, Nessus, Social Engineering Toolkit, or Kali Linux
- Operating system, web server, web application, database configuration, and security experience
- Familiarity with network discovery, vulnerability scanning, fuzzing, penetration testing, firewall reviews, social engineering, wireless testing, and password cracking
- Internship or experience with threat intelligence vendors, tools, or platforms
RSM US LLP Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about RSM US LLP and has not been reviewed or approved by RSM US LLP.
-
Parental & Family Support — Parental leave, caregiver leave, and family‑building assistance are standout strengths, including 12 weeks fully paid parental leave, six weeks paid family caregiver leave, up to $50,000 in fertility coverage, and up to $20,000 per child for adoption or surrogacy, plus backup care resources. These benefits create a family‑forward package that stands out within the firm’s total rewards.
-
Leave & Time Off Breadth — Time‑off options are broad, with self‑managed PTO for associates and above, at least 14 paid holidays, and firm‑wide wellbeing days alongside hybrid work flexibility. This breadth is consistently presented as a strong component of the overall offering.
-
Healthcare Strength — Medical coverage includes multiple plan designs (two HDHPs and a PPO), telehealth access, and a mental‑health platform offering up to eight free 1:1 sessions per year. Health benefits are characterized as solid to strong for the industry.
RSM US LLP Insights
What We Do
RSM is the leading provider of audit, tax and consulting services to the middle market. With over 11,000 employees across the U.S. and Canada and a global presence in 120 countries, our purpose is to deliver the power of being understood to our clients, colleagues and communities. As first-choice advisors, we are focused on developing leading professionals and innovative services to meet our clients’ evolving needs in today’s ever-changing business environment. Through a supportive, caring culture, our people are empowered to be their authentic selves and share their unique perspectives. Our culture of diversity and inclusion enhances the insights we provide while transforming innovation, collaboration and business results through fostering an inclusive environment, working hard to engage a talented workforce and reflect our diverse community, and developing relationships that serve others in business and the broader community. Together, our people’s individual talents and diverse perspectives strengthen our teams and enhances the unique insights that we provide to our clients. Through a supportive, caring culture, our people are empowered to be their authentic selves and share their unique perspectives. Our culture of diversity and inclusion enhances the insights we provide while transforming innovation, collaboration and business results through fostering an inclusive environment, working hard to engage a talented workforce and reflect our diverse community, and developing relationships that serve others in business and the broader community. Together, our people’s individual talents and diverse perspectives strengthen our teams and enhances the unique insights that we provide to our clients. For more information, visit rsmus.com.
