Associate Offensive Security Consultant

This is a fully remote position, open to applicants in United States.

📋 Description

• Design and execute offensive security engagements with varying sizes, scopes, focuses, and methodologies.

• Present findings, attack vectors, recommendations, and strategies to both technical and executive stakeholders through written reports and oral presentations.

• Develop scripts, tools, or methodologies to improve offensive security services.

• Act as a subject matter expert in initial access, open-source intelligence analysis, adversary tradecraft, offensive operations across Windows, Linux, and macOS, evasion tactics, or technical capability enhancement.

• Employ common offensive security testing tools and methodologies.

• Keep abreast of the latest adversary tradecraft and vulnerabilities.

• Share successes and challenges with team members and team leaders.

• Engage with client contacts and staff in a constructive and professional manner.

• Organize and prepare for both internal and client-facing meetings.

• Assist in defining the scope of potential engagements, oversee technical testing from initiation to remediation, and mentor less experienced personnel.

• Educate team members on adversary Tactics, Techniques, and Procedures (TTPs) and related tools.

• Contribute to and facilitate SpecterOps training courses, including instruction and lab support.

• Learn about and contribute to various services and projects while building foundational expertise in the Adversary Simulation service line.

⛳️ Requirements

• Willingness to travel domestically and internationally, averaging up to 25% per year.

• Must pass a criminal background check.

• Candidates must have authorization to work and reside in the United States; SpecterOps does not sponsor immigration visas.

• Basic understanding of offensive security concepts and assessments.

• Basic knowledge of security principles, policies, and industry best practices.

• Proficient understanding of Windows and *NIX-based operating systems.

• Familiarity with networking concepts.

• Knowledge of Active Directory.

• Experience with programming or scripting languages such as C#/.NET, C++, Python, PowerShell, and Bash.

• Strong aptitude for technical writing, including assessment reports, presentations, and operational procedures.

• Excellent written and verbal communication skills along with strong interpersonal abilities.

• A solid commitment to enhancing personal skills and contributing to the information security community through research.

• Openness to support both public and private training initiatives.

• A desire to embody the company’s core values.

• A Bachelor's degree in a technical field is considered a plus, but not mandatory.

🏝️ Benefits

• Comprehensive health, dental, vision, and life insurance: fully covered for both the employee and their family.

• Flexible time-off policy.

• 13 paid holidays each year.

• 401(k) plan with up to a 4% company match.

• Equity opportunities and quarterly bonuses based on company performance.

• Remote work: $1,500 allowance for setting up a home office in the first year.

• $500 annual allowance for home office expenses after the first year.

• $150 monthly reimbursement for cell phone and internet costs.

• $5,000 annual allowance for professional development.

• $5,250 towards continuing education or student loan repayments.

• $1,200 annual budget for lifestyle, wellness, pet insurance, and more.

• A one-time benefit of $10,000 for family planning assistance.

• Open policies regarding intellectual property, allowing researchers to retain rights over open-sourced research and tools.

• In-person and virtual employee events throughout the year.

• Company swag.