Senior Consultant, Adversary Services (Red Team)

Accountabilities: The Senior Consultant, Adversary Services (Red Team) will lead advanced offensive security engagements, simulate sophisticated attackers, and provide strategic guidance to help clients improve their detection, response, and overall security posture.

Lead red team, adversary emulation, purple team, and targeted offensive security engagements across diverse industries and technology environments.

Design and execute realistic attack scenarios aligned with real-world threat actor behaviors, MITRE ATT&CK techniques, and relevant security frameworks.

Perform advanced offensive operations, including initial access, persistence, privilege escalation, lateral movement, and evasion of security controls.

Develop and apply sophisticated adversary tradecraft, including custom exploits, payloads, scripts, and command-and-control infrastructure.

Create and maintain advanced C2 capabilities and tooling using platforms such as Cobalt Strike, Sliver, Mythic, and similar technologies.

Identify vulnerabilities, misconfigurations, and security gaps while providing actionable remediation recommendations.

Serve as a trusted security advisor to clients, translating technical findings into strategic insights for technical and executive audiences.

Conduct research into emerging threats, attacker techniques, and defensive challenges to continuously improve assessment methodologies.

Contribute to internal security capabilities through reusable tooling, testing approaches, documentation, and team knowledge sharing.

Support thought leadership initiatives through research publications, conference presentations, training sessions, and customer workshops.

Collaborate with team members to maintain a positive, innovative, and high-performing security culture.

Requirements:

The ideal candidate is an experienced offensive security professional with a strong background in red teaming, adversary simulation, and advanced penetration testing. They should combine technical depth with strong communication skills and the ability to operate effectively in complex client environments.

5+ years of experience in penetration testing, adversary services, red teaming, and/or purple teaming, including at least 2+ years leading covert red team engagements.

Proven experience designing and delivering advanced offensive security assessments based on modern threat actor tactics, techniques, and procedures.

Strong understanding of adversary behaviors, including advanced persistent threats (APTs), ransomware operations, and insider threat scenarios.

Deep expertise across the attack lifecycle, including OSINT, social engineering, phishing, vishing, payload development, C2 operations, lateral movement, privilege escalation, and impact objectives.

Extensive experience conducting offensive security engagements across on-premises, cloud, and hybrid environments.

Advanced knowledge of command-and-control infrastructure, evasion techniques, and custom offensive tooling development.

Programming and scripting experience with languages such as Python, Ruby, Go, or similar technologies.

Ability to create and modify security tools, scripts, and automation frameworks to support offensive operations.

Strong written and verbal communication skills with the ability to explain complex technical concepts to both technical and non-technical audiences.

Ability to work independently, manage changing priorities, and thrive in a fast-paced consulting environment.

Collaborative mindset with a commitment to knowledge sharing and team success.

Relevant security certifications such as CRTO, CRTO II, ATRTO, OSEP, or comparable offensive security credentials are a plus.

Benefits:

Competitive annual salary range of $152,000 - $189,000 , depending on experience, location, education, certifications, and other job-related factors.

Potential eligibility for annual incentive, commission, and recognition programs.

Flexible remote work model designed to support productivity and work-life balance.

Comprehensive healthcare coverage options.

Paid parental leave and flexible time off programs.

Certification and professional training reimbursement opportunities.

Digital mental health and wellbeing support resources.

Opportunities to participate in employee resource groups and community initiatives.

Access to virtual and in-person team events focused on connection and collaboration.

Opportunity to work on complex cybersecurity challenges with highly skilled security professionals.

How Jobgether works: We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best!  Why Apply Through Jobgether? 

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.

#LI-CL1