Offensive Security Consultant

Accountabilities:

• • Plan and execute offensive security engagements across varying scopes, objectives, environments, and methodologies, including red team assessments, penetration tests, web application assessments, cloud security assessments, and offensive maturity assessments.
  • Communicate attack paths, findings, risks, recommendations, and strategic insights clearly to both technical and executive stakeholders through reports, presentations, and briefings.
  • Develop scripts, tools, techniques, and methodologies that improve offensive security capabilities and enhance service delivery.
  • Serve as a subject matter expert in areas such as initial access, open-source intelligence, adversary tradecraft, Windows/Linux/macOS operations, evasion, or technical capability development.
  • Apply established offensive security tools and tradecraft while continuously researching emerging vulnerabilities, techniques, and adversary behaviors.
  • Collaborate closely with clients, consultants, and engagement leads, communicating progress, obstacles, successes, and technical considerations throughout projects.
  • Support prospective engagement scoping, internal planning, kickoff activities, technical testing, remediation discussions, and project delivery.
  • Lead smaller teams and engagements when required, while mentoring less experienced consultants and supporting their technical development.
  • Train team members on adversary Tactics, Techniques, and Procedures (TTPs), tools, and offensive methodologies.
  • Develop, improve, and maintain technical content for security training programs and support course delivery through instruction, labs, and student assistance.
  • Coordinate and prepare for internal and customer-facing meetings while maintaining strong organization across multiple concurrent projects.
  • Contribute to a culture of continuous improvement, technical curiosity, transparency, empathy, and knowledge sharing.

  Requirements

  • Demonstrated working knowledge of offensive security concepts, assessment methodologies, security principles, policies, and industry best practices.
  • Practical knowledge of Windows and Unix/Linux-based operating systems, networking concepts, and Active Directory.
  • Familiarity with programming and scripting languages such as C#/.NET, C++, Python, PowerShell, Bash, or comparable technologies.
  • Strong technical writing capabilities, including the ability to produce assessment reports, presentations, operating procedures, and other client-facing documentation.
  • Excellent written, verbal, and interpersonal communication skills, with the ability to explain complex technical topics clearly to clients, teammates, and leadership.
  • Ability to independently contribute to significant security services and projects while managing multiple priorities with limited supervision.
  • Ability and willingness to lead small teams and customer engagements and take ownership of project delivery.
  • Strong interest in executing offensive security services such as red teaming, penetration testing, web application security, cloud security, and offensive maturity assessments.
  • Willingness to develop and deliver technical training and mentor fellow consultants in offensive techniques and methodologies.
  • Ability to travel domestically and internationally, averaging up to approximately 25% annually.
  • Must be able to successfully pass a criminal background check and be authorized to work and reside in the United States without immigration sponsorship.
  • Strong alignment with values centered on passionate curiosity, continuous improvement, empathy, sustainability, humility, empowerment, and transparency.
  • A bachelor's degree in a technical field is advantageous but not required.
  • Experience supporting large enterprise or federal government security assessments, including Fortune 1000 environments, is a plus.
  • Experience administering, attacking, or defending Windows/Active Directory, Linux, and/or macOS environments is desirable.
  • Experience in information security consulting, technical training, public security research, conference presentations, blogging, white papers, or open-source tool development is advantageous.
  • A genuine interest in teaching, research, and advancing offensive security practices is highly valued.

  Benefits

  • Competitive compensation: Consultant base salary of $120,000–$150,000 annually, commensurate with experience.
  • Comprehensive insurance: Health, dental, vision, and life insurance with 100% coverage for employees and their families.
  • Flexible time off: Flexible PTO policy plus 13 paid holidays annually.
  • Retirement savings: 401(k) plan with up to a 4% company match.
  • Performance rewards: Equity opportunities and quarterly bonuses tied to company performance.
  • Remote work support:$1,500 first-year home-office setup allowance and a $500 annual home-office allowance thereafter.
  • Connectivity support:$150 monthly reimbursement for cell phone and internet expenses.
  • Professional development:$5,000 annual professional development allowance.
  • Education support: Up to $5,250 toward continuing education or student loan repayment.
  • Wellness and lifestyle:$1,200 annual budget that can support lifestyle, wellness, pet insurance, and related needs.
  • Family planning: One-time $10,000 family-planning benefit.
  • Open intellectual property practices: Researchers can retain rights to open-source research and tools under applicable policies.
  • Remote-first environment: Work remotely from the United States with quarterly in-person company events and additional meetings as needed.
  • Community and culture: Opportunities to participate in virtual and in-person employee events throughout the year.