Offensive Security Consultant
Summary
Plans and executes red team assessments, penetration tests, and other offensive security engagements for large organizations; combines hands-on technical work (using tools like C#, Python, PowerShell) with client advisory, technical writing, and security research across Windows/Linux/macOS environments.
This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for an Offensive Security Consultant based in the United States.
This role sits within a specialized consulting environment focused on adversary simulation and offensive security.
You will plan and execute red team assessments, penetration tests, and other advanced security engagements for large organizations.
The position combines hands-on technical operations with client advisory, technical writing, training, and security research.
You’ll work across diverse environments, developing tools and methodologies while staying current with emerging vulnerabilities and adversary tradecraft.
The role also provides opportunities to specialize in areas such as initial access, OSINT, evasion, endpoint operations, or offensive capability development.
Success requires both strong technical depth and the communication skills to brief technical teams and senior executives.
This is a remote U.S.-based opportunity with approximately 25% travel, including quarterly company events and occasional client engagements.
Accountabilities:
- Plan and execute offensive security engagements across varying scopes, objectives, environments, and methodologies, including red team assessments, penetration tests, web application assessments, cloud security assessments, and offensive maturity assessments.
- Communicate attack paths, findings, risks, recommendations, and strategic insights clearly to both technical and executive stakeholders through reports, presentations, and briefings.
- Develop scripts, tools, techniques, and methodologies that improve offensive security capabilities and enhance service delivery.
- Serve as a subject matter expert in areas such as initial access, open-source intelligence, adversary tradecraft, Windows/Linux/macOS operations, evasion, or technical capability development.
- Apply established offensive security tools and tradecraft while continuously researching emerging vulnerabilities, techniques, and adversary behaviors.
- Collaborate closely with clients, consultants, and engagement leads, communicating progress, obstacles, successes, and technical considerations throughout projects.
- Support prospective engagement scoping, internal planning, kickoff activities, technical testing, remediation discussions, and project delivery.
- Lead smaller teams and engagements when required, while mentoring less experienced consultants and supporting their technical development.
- Train team members on adversary Tactics, Techniques, and Procedures (TTPs), tools, and offensive methodologies.
- Develop, improve, and maintain technical content for security training programs and support course delivery through instruction, labs, and student assistance.
- Coordinate and prepare for internal and customer-facing meetings while maintaining strong organization across multiple concurrent projects.
- Contribute to a culture of continuous improvement, technical curiosity, transparency, empathy, and knowledge sharing.
- Demonstrated working knowledge of offensive security concepts, assessment methodologies, security principles, policies, and industry best practices.
- Practical knowledge of Windows and Unix/Linux-based operating systems, networking concepts, and Active Directory.
- Familiarity with programming and scripting languages such as C#/.NET, C++, Python, PowerShell, Bash, or comparable technologies.
- Strong technical writing capabilities, including the ability to produce assessment reports, presentations, operating procedures, and other client-facing documentation.
- Excellent written, verbal, and interpersonal communication skills, with the ability to explain complex technical topics clearly to clients, teammates, and leadership.
- Ability to independently contribute to significant security services and projects while managing multiple priorities with limited supervision.
- Ability and willingness to lead small teams and customer engagements and take ownership of project delivery.
- Strong interest in executing offensive security services such as red teaming, penetration testing, web application security, cloud security, and offensive maturity assessments.
- Willingness to develop and deliver technical training and mentor fellow consultants in offensive techniques and methodologies.
- Ability to travel domestically and internationally, averaging up to approximately 25% annually.
- Must be able to successfully pass a criminal background check and be authorized to work and reside in the United States without immigration sponsorship.
- Strong alignment with values centered on passionate curiosity, continuous improvement, empathy, sustainability, humility, empowerment, and transparency.
- A bachelor's degree in a technical field is advantageous but not required.
- Experience supporting large enterprise or federal government security assessments, including Fortune 1000 environments, is a plus.
- Experience administering, attacking, or defending Windows/Active Directory, Linux, and/or macOS environments is desirable.
- Experience in information security consulting, technical training, public security research, conference presentations, blogging, white papers, or open-source tool development is advantageous.
- A genuine interest in teaching, research, and advancing offensive security practices is highly valued.
- Competitive compensation: Consultant base salary of $120,000–$150,000 annually, commensurate with experience.
- Comprehensive insurance: Health, dental, vision, and life insurance with 100% coverage for employees and their families.
- Flexible time off: Flexible PTO policy plus 13 paid holidays annually.
- Retirement savings: 401(k) plan with up to a 4% company match.
- Performance rewards: Equity opportunities and quarterly bonuses tied to company performance.
- Remote work support: $1,500 first-year home-office setup allowance and a $500 annual home-office allowance thereafter.
- Connectivity support: $150 monthly reimbursement for cell phone and internet expenses.
- Professional development: $5,000 annual professional development allowance.
- Education support: Up to $5,250 toward continuing education or student loan repayment.
- Wellness and lifestyle: $1,200 annual budget that can support lifestyle, wellness, pet insurance, and related needs.
- Family planning: One-time $10,000 family-planning benefit.
- Open intellectual property practices: Researchers can retain rights to open-source research and tools under applicable policies.
- Remote-first environment: Work remotely from the United States with quarterly in-person company events and additional meetings as needed.
- Community and culture: Opportunities to participate in virtual and in-person employee events throughout the year.