Offensive Security Consultant

This is a fully remote position, open to applicants in United States.

📋 Description

• Design and execute offensive security engagements of various sizes, scopes, focuses, and methodologies.

• Convey findings, attack vectors, recommendations, and strategies to both technical and executive client stakeholders through comprehensive reports and oral presentations.

• Develop scripts, tools, or methodologies to enhance offensive security services.

• Act as a subject matter expert in areas such as initial access, open-source intelligence analysis, adversarial tradecraft, offensive operations for Windows/Linux/macOS, evasion techniques, or technical capability development.

• Utilize a range of common offensive security testing tools and techniques.

• Stay informed about the latest adversarial tradecraft and vulnerabilities.

• Share successes and challenges with team members and leadership in a constructive manner.

• Engage with client contacts and staff in a professional and constructive manner.

• Organize and prepare for both internal and client-facing meetings.

• Assist in defining the scope of potential engagements, overseeing technical testing from initiation through remediation, and mentoring junior staff.

• Provide training to team members on adversary Tactics, Techniques, and Procedures (TTPs) and associated tools.

• Contribute to and enhance SpecterOps training course materials and support course delivery.

⛳️ Requirements

• Willingness to travel domestically and internationally, averaging up to 25% each year.

• Must successfully pass a criminal background check.

• Familiarity with offensive security principles and assessments.

• Understanding of security principles, policies, and industry best practices.

• Knowledge of Windows and *NIX-based operating systems.

• Understanding of networking concepts.

• Familiarity with Active Directory.

• Proficiency in programming or scripting languages, such as C#/.NET, C++, Python, PowerShell, and Bash.

• Strong aptitude for technical writing, including assessment reports, presentations, and operational procedures.

• Excellent written and verbal communication skills, along with strong interpersonal abilities.

• Capability to independently contribute to major services and projects.

• Ability to lead small teams and engagements effectively.

• Competence in managing multiple projects concurrently.

• Effective communication skills with clients, team members, and management for project success.

• Ability to oversee client projects with minimal supervision.

• Enthusiasm for leading and executing offensive security services, including red team activities, penetration testing, web application security assessments, cloud security evaluations, and maturity assessments.

• Eagerness to create and deliver training content as a lead instructor.

• Commitment to mentoring and training fellow consultants.

🏝️ Benefits

• Health, Dental, Vision, and life insurance: fully covered for both the employee and their family.

• Flexible time off policy.

• 13 paid holidays each year.

• 401(k) plan with up to 4% company matching.

• Equity and quarterly bonuses based on company performance.

• Remote work: $1,500 allowance in the first year for home office setup.

• $500 annual home office allowance after the first year.

• $150 monthly reimbursement for cell phone and internet expenses.

• $5,000 annual allowance for professional development.

• $5,250 allocated for continuing education or student loan repayment.

• $1,200 annual budget for lifestyle, wellness, pet insurance, and more.

• A one-time benefit of $10,000 for family planning.

• Open intellectual property policies, allowing researchers to retain rights over open-sourced research and tools.

• In-person and virtual employee events throughout the year.

• Company swag.