Associate Offensive Security Consultant

Accountabilities:

• • Plan and participate in offensive security engagements across varying sizes, scopes, objectives, and methodologies, including red team assessments, penetration tests, and specialized security assessments.
  • Execute offensive security testing using established tools, techniques, and adversary tradecraft across diverse client environments.
  • Communicate attack paths, findings, risks, recommendations, successes, and obstacles clearly to both technical stakeholders and executive audiences through written reports and presentations.
  • Develop scripts, tools, techniques, and methodologies that improve the effectiveness and efficiency of offensive security services.
  • Develop expertise in at least one key area, such as initial access, open-source intelligence, adversary tradecraft, Windows/Linux/macOS operations, evasion, or technical capability development.
  • Participate in engagement scoping, kickoff activities, technical testing, remediation discussions, and customer-facing meetings.
  • Collaborate closely with consultants, team leads, and client personnel in a constructive and professional manner.
  • Contribute to internal knowledge sharing and mentor less experienced team members as capabilities develop.
  • Train colleagues on adversary tactics, techniques, procedures (TTPs), and offensive security tools.
  • Contribute to the development and improvement of training content and assist with course delivery, including instruction, laboratory support, and student questions.
  • Stay current with emerging vulnerabilities, offensive techniques, adversary behaviors, and developments across the information security landscape.
  • Contribute to research and community initiatives through technical articles, conference presentations, open-source tools, white papers, and other forms of knowledge sharing.

  Requirements

  • Foundational knowledge of offensive security concepts, security assessments, security principles, policies, and industry best practices.
  • Working knowledge of Windows and Unix/Linux-based operating systems, networking concepts, and Active Directory.
  • Working knowledge of at least one programming or scripting language, such as C#/.NET, C++, Python, PowerShell, or Bash.
  • Strong technical aptitude and a genuine desire to continuously learn, improve, and develop deeper expertise in offensive security.
  • Ability to produce clear, professional technical documentation, including assessment reports, presentations, operating procedures, and other written deliverables.
  • Strong written and verbal communication skills, with the ability to interact effectively with both technical and executive stakeholders.
  • Excellent organization, self-direction, problem-solving ability, and interpersonal skills.
  • Willingness to embody values centered on curiosity, continuous improvement, empathy, sustainability, humility, empowerment, and transparency.
  • Ability to travel domestically and internationally, averaging up to approximately 25% annually.
  • Ability to successfully complete a criminal background check.
  • Must be authorized to work and reside in the United States; immigration visa sponsorship is not currently available.
  • A bachelor's degree in a technical discipline is a plus but not required.
  • Experience supporting security assessments for large enterprises or federal organizations is advantageous.
  • Experience administering, attacking, or defending Windows/Active Directory, Linux, and/or macOS environments is a plus.
  • Prior experience in technical writing, information security consulting, technical training, or service-based cybersecurity environments is beneficial.
  • Public contributions to the information security community, such as conference talks, blog posts, white papers, or open-source security tools, are valued.
  • A demonstrated interest in teaching, training, research, and sharing offensive security knowledge is highly desirable.

  Benefits

  • Salary: $100,000–$125,000 annual base salary, depending on experience.
  • Remote work: U.S.-based remote position with a $1,500 first-year home office setup allowance.
  • Home office support: $500 annual home office allowance after the first year.
  • Communication expenses: $150 monthly reimbursement for cell phone and internet costs.
  • Healthcare: 100% company-paid health, dental, vision, and life insurance for employees and their families.
  • Time off: Flexible paid time off policy plus 13 paid holidays annually.
  • Retirement: 401(k) plan with up to a 4% company match.
  • Performance rewards: Equity opportunities and quarterly bonuses based on company performance.
  • Professional development: $5,000 annual professional development allowance.
  • Education support: Up to $5,250 annually toward continuing education or student loan repayment.
  • Lifestyle and wellness: $1,200 annual budget that can be used toward lifestyle, wellness, pet insurance, and related benefits.
  • Family planning: One-time $10,000 family planning benefit.
  • Research freedom: Open intellectual property policies that allow researchers to retain rights to open-source research and tools.
  • Community and culture: In-person and virtual employee events throughout the year, plus company merchandise.
  • Travel: Quarterly in-person company events and additional travel opportunities based on client and business needs.