Senior Security Consultant, Red Team

Accountabilities Participate in and lead Red Team and Purple Team campaigns for clients, working both remotely and on-site across complex enterprise environments.

Conduct adversarial emulation, assumed-breach scenarios, post-exploitation, social engineering, and physical security assessments to simulate realistic attack paths and identify critical weaknesses.

Perform reconnaissance and identify critical assets, vulnerabilities, attack paths, and opportunities for exploitation across people, processes, applications, networks, and infrastructure.

Execute sophisticated penetration testing across network, web application, wireless, physical security, and social engineering environments.

Develop and use custom tools, scripts, proof-of-concept exploits, and offensive techniques to support engagement objectives.

Manage project activities, priorities, deliverables, and deadlines while collaborating with geographically distributed teams across multiple time zones.

Clearly communicate complex technical vulnerabilities and business risks to both technical specialists and non-technical client stakeholders.

Produce comprehensive technical reports documenting findings, attack paths, business impact, evidence, and actionable recommendations for improving security posture.

Lead technical presentations for clients and participate in project meetings, conference calls, and business development activities when required.

Provide technical leadership, coaching, and mentorship to consulting teams and clients on offensive security and broader cybersecurity topics.

Contribute to the security community through technical presentations, whitepapers, research, and other thought-leadership initiatives.

Requirements:

Bring significant experience performing and leading covert Red Team operations, including adversarial emulation, assumed-breach scenarios, post-exploitation, social engineering, and physical security testing.

Demonstrate strong penetration testing experience across network infrastructure, web applications, wireless environments, physical security, and social engineering.

Have hands-on experience with Command and Control (C2) and post-exploitation frameworks such as Cobalt Strike, Empire, Metasploit, Throwback, or comparable tools.

Possess strong scripting or programming capabilities in several relevant languages, such as Python, Ruby, PowerShell, Java, or Shell.

Have a strong understanding of enterprise network, system, and application architecture, including complex environments built around Microsoft Windows, Active Directory, and Linux.

Demonstrate deep knowledge of Windows and Linux system administration and post-exploitation techniques across both platforms.

Be highly capable of identifying vulnerabilities, developing proof-of-concept exploits, and translating technical findings into meaningful security outcomes.

Bring strong knowledge of operating system, service, and application hardening practices.

Have excellent communication and presentation skills, with the ability to make complex technical topics accessible to audiences at different levels of an organization.

Be comfortable working in client-facing environments and providing technical leadership during security engagements.

Be willing and able to travel at least 50% of the time, including both domestic and international travel.

Demonstrate curiosity, creativity, integrity, and a strong passion for offensive security and continuous technical learning.

Benefits:

Competitive compensation ranging from $75,000 to $150,000 USD, depending on location and experience level.

Performance-based incentives.

Remote work flexibility with the option to work from an office when appropriate.

Opportunity to work with an established leader in the cybersecurity industry.

Access to highly experienced technical teams and advanced security research.

Exposure to sophisticated Red Team, Purple Team, penetration testing, and adversarial security engagements.

Opportunities to work with international clients and travel globally.

A collaborative, high-energy environment that encourages technical innovation and creativity.

Opportunities to contribute to cybersecurity research, presentations, whitepapers, and industry thought leadership.

Meaningful work focused on improving the security posture and resilience of organizations facing evolving cyber threats.

How Jobgether works: We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best!  Why Apply Through Jobgether? 

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.

#LI-CL1