Offensive Security Consultant

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Offensive Security Consultant based in the United States.

This role sits within a specialized consulting team focused on offensive security assessments, adversary simulation, and security capability development.

• Plan, scope, and execute sophisticated offensive security engagements across red team assessments, penetration tests, web application testing, cloud security assessments, offensive maturity assessments, and other specialized services.
• Analyze vulnerabilities, attack paths, adversary tradecraft, and security weaknesses, translating technical findings into practical remediation strategies and business-relevant recommendations.
• Communicate assessment results clearly through detailed technical reports, executive briefings, presentations, and direct discussions with technical and leadership stakeholders.
• Develop scripts, tools, methodologies, and other technical capabilities that improve the effectiveness and efficiency of offensive security operations.
• Serve as a subject matter expert in areas such as initial access, open-source intelligence, adversary tradecraft, Windows/Linux/macOS operations, evasion techniques, or offensive capability development.
• Stay current on emerging vulnerabilities, offensive techniques, security research, and evolving adversary behaviors, incorporating relevant developments into client engagements and internal practices.
• Collaborate with internal teams and client contacts throughout engagements, communicating progress, risks, obstacles, and successes while maintaining strong professional relationships.
• Support prospective engagement scoping, technical testing from kickoff through remediation, and the coordination of multiple projects and client-facing activities.
• Mentor less experienced consultants and help develop team expertise in offensive tactics, techniques, procedures, and security tooling.
• Contribute to technical training programs by creating, improving, and delivering course content, including instruction and laboratory support.

• 5+ years of experience in penetration testing, red team operations, offensive security, or a closely related field.
• Demonstrated expertise in offensive security concepts, assessment methodologies, security principles, industry best practices, and adversary simulation.
• Strong knowledge of Windows and Unix/Linux-based operating systems, networking concepts, and Active Directory environments.
• Experience using common offensive security tools and frameworks, with familiarity across areas such as reconnaissance, exploitation, command and control, vulnerability assessment, and web application testing.
• Working knowledge of programming or scripting languages such as C#/.NET, C++, Python, PowerShell, Bash, or similar technologies.
• Ability to independently lead and execute a broad range of offensive security engagements while managing multiple projects and competing priorities.
• Strong technical writing skills, including the ability to produce high-quality assessment reports, presentations, operating procedures, and client documentation.
• Excellent verbal communication, interpersonal, and stakeholder-management skills, with the ability to communicate effectively with both technical teams and executive audiences.
• Demonstrated experience leading small teams, managing client projects, delivering presentations, and maintaining trusted client relationships.
• Willingness and ability to mentor consultants and develop or deliver technical training focused on offensive security techniques.
• Bachelor's degree in a technical discipline is preferred; equivalent professional experience may also be considered.
• Relevant certifications such as OSCP, GPEN, GPXN, AI-focused red team certifications, or comparable industry credentials are advantageous.
• Experience with large enterprise or government security assessments, public security research, technical training, or contributions to the information security community is a plus.
• Ability to travel domestically and internationally, averaging up to approximately 25% annually, and authorization to reside and work in the United States without visa sponsorship.
• Ability to pass a criminal background check and demonstrate a mindset aligned with curiosity, continuous improvement, empathy, humility, transparency, and empowerment.

• Base salary: $145,000–$170,000 annually, depending on experience.
• Fully remote position within the United States.
• Health, dental, vision, and life insurance with 100% of premiums covered for employees and their families.
• Flexible time-off policy and 13 paid holidays annually.
• 401(k) plan with up to a 4% company match.
• Equity opportunities and performance-based bonuses.
• $1,500 first-year home office setup allowance and $500 annual home office allowance thereafter.
• $1,800 annual cell phone and internet reimbursement.
• $5,000 annual professional development allowance.
• Up to $5,250 annually toward continuing education.