Senior Security Consultant, Red Team

Accountabilities

• Participate in and lead Red Team and Purple Team campaigns for clients, working both remotely and on-site across complex enterprise environments.

• Conduct adversarial emulation, assumed-breach scenarios, post-exploitation, social engineering, and physical security assessments to simulate realistic attack paths and identify critical weaknesses.

• Perform reconnaissance and identify critical assets, vulnerabilities, attack paths, and opportunities for exploitation across people, processes, applications, networks, and infrastructure.

• Execute sophisticated penetration testing across network, web application, wireless, physical security, and social engineering environments.

• Develop and use custom tools, scripts, proof-of-concept exploits, and offensive techniques to support engagement objectives.

• Manage project activities, priorities, deliverables, and deadlines while collaborating with geographically distributed teams across multiple time zones.

• Clearly communicate complex technical vulnerabilities and business risks to both technical specialists and non-technical client stakeholders.

• Produce comprehensive technical reports documenting findings, attack paths, business impact, evidence, and actionable recommendations for improving security posture.

• Lead technical presentations for clients and participate in project meetings, conference calls, and business development activities when required.

• Provide technical leadership, coaching, and mentorship to consulting teams and clients on offensive security and broader cybersecurity topics.

• Contribute to the security community through technical presentations, whitepapers, research, and other thought-leadership initiatives.

Requirements:

• Bring significant experience performing and leading covert Red Team operations, including adversarial emulation, assumed-breach scenarios, post-exploitation, social engineering, and physical security testing.

• Demonstrate strong penetration testing experience across network infrastructure, web applications, wireless environments, physical security, and social engineering.

• Have hands-on experience with Command and Control (C2) and post-exploitation frameworks such as Cobalt Strike, Empire, Metasploit, Throwback, or comparable tools.

• Possess strong scripting or programming capabilities in several relevant languages, such as Python, Ruby, PowerShell, Java, or Shell.

• Have a strong understanding of enterprise network, system, and application architecture, including complex environments built around Microsoft Windows, Active Directory, and Linux.

• Demonstrate deep knowledge of Windows and Linux system administration and post-exploitation techniques across both platforms.

• Be highly capable of identifying vulnerabilities, developing proof-of-concept exploits, and translating technical findings into meaningful security outcomes.

• Bring strong knowledge of operating system, service, and application hardening practices.

• Have excellent communication and presentation skills, with the ability to make complex technical topics accessible to audiences at different levels of an organization.

• Be comfortable working in client-facing environments and providing technical leadership during security engagements.

• Be willing and able to travel at least 50% of the time, including both domestic and international travel.

• Demonstrate curiosity, creativity, integrity, and a strong passion for offensive security and continuous technical learning.

Benefits:

• Competitive compensation ranging from $75,000 to $150,000 USD, depending on location and experience level.

• Performance-based incentives.

• Remote work flexibility with the option to work from an office when appropriate.

• Opportunity to work with an established leader in the cybersecurity industry.

• Access to highly experienced technical teams and advanced security research.

• Exposure to sophisticated Red Team, Purple Team, penetration testing, and adversarial security engagements.

• Opportunities to work with international clients and travel globally.

• A collaborative, high-energy environment that encourages technical innovation and creativity.

• Opportunities to contribute to cybersecurity research, presentations, whitepapers, and industry thought leadership.

• Meaningful work focused on improving the security posture and resilience of organizations facing evolving cyber threats.