Pros
The people are great. They are a talented and hard working bunch that are always willing to answer questions. Different projects are a great way to gain exposure to various technologies used in different industries. There's always something new to work on. They invest in the people. There's a clear certification path and a training budget to help develop professionally.
Cons
When there's a lot of projects, there's no downtime and engagements overlap. It's typical to work more than 40 hours weeks even though management say they try to plan schedules to have gaps between engagements. There's no clear metrics to see how you're doing besides peer reviews and client feedback because you can't be expected to find critical vulnerabilities in every project. Some just don't have anything or the scoped is too limited. When there's not enough client projects coming in, then that's even worse. On one hand, management will say they're preemptively cutting costs and reducing benefits to brace for economic downturn, but people don't have to worry about layoffs. On the other hand, people will quietly get let go every quarter if quarterly targets aren't met.