Managing Consultant – Red Team

This is a fully remote position, open to applicants in United States.

📋 Description

• Engage directly in red team, purple team, and social engineering initiatives.

• Allocate time evenly between technical execution and management duties.

• Foster the performance and growth of direct reports.

• Collaborate with consultants to uphold technical expertise and grasp delivery challenges.

• Establish trustworthy relationships with both consultants and clients.

• Offer coaching and address performance issues.

• Collaborate with the Practice Director to enhance team operations.

• Provide leadership or thought leadership to security consultants performing client engagements.

• Create red team attack scenarios and purple team test cases aligned with client objectives.

• Generate and review assessment reports that include actionable recommendations and technical evidence.

⛳️ Requirements

• Proven experience in managing personnel, including providing regular feedback, facilitating career development, and addressing performance issues.

• Experience in mentoring technical professionals through collaborative efforts and guiding them towards increased responsibilities.

• Capability to give and receive honest feedback, navigate disagreements professionally, and sustain productive relationships.

• Experience in addressing both internal and client concerns, coordinating resolutions, and recognizing when further support or authority is necessary.

• Experience in coordinating staffing requirements and development opportunities with relevant departments or business units.

• A minimum of five years in offensive security, delivering adversary emulation engagements, including red team and purple team assessments across diverse industries.

• Experience in developing red team attack scenarios and purple team test cases aligned with client goals.

• Demonstrated operational security judgment based on assessment objectives, detection risks, and potential client impact.

• Ability to create and review precise assessment reports with actionable recommendations and technical evidence.

• Experience in enhancing red team capabilities and methodologies.

• Expertise in Active Directory exploitation and lateral movement techniques.

• Proficient knowledge of Windows, macOS, and Linux systems.

• Familiarity with AWS, Azure, GCP, Microsoft 365, and Google Workspace.

• Knowledge of Kubernetes and Docker.

• Practical experience with C2 frameworks such as Sliver and Mythic.

• Experience in developing and modifying custom tools and payloads, applying EDR evasion techniques, and performing reverse engineering.

• Proficient in various programming and/or scripting languages including Python, Go, C#, C++, PowerShell, or Bash.

• Ability to analyze network and application communications.

• Experience conducting social engineering assessments, including reconnaissance and phishing/vishing scenarios, with an understanding of countermeasures.

• Preferred: Experience in conducting physical security assessments, or a willingness to develop that capability through training and mentorship.

• All new hires must successfully pass a background check as a condition of employment.

🏝️ Benefits

• Generous Time Off and Company-Wide Holidays

• Team Events and International Travel Opportunities

• Work From Home Support

• Monthly Allowance for Cell Phone and Internet

• Training Budget

• Retirement; 401k Matching for Traditional and Roth Accounts in the US

• Health Insurance Options Including Medical, Dental, Vision

• Paid Parental Leave

• Inclusive culture and Equal Opportunity employment