Senior Red Team Consultant

This is a fully remote position, open to applicants in United States, +1 more country.

📋 Description

• Conduct red teaming engagements, starting with research, organizational profiling, defining attack objectives, developing attack trees, and other planning activities.

• Execute operations based on engagement plans to meet attack objectives through various attack vectors, including network, web applications, physical security, social engineering, and more.

• Assist clients in understanding their attack surface and their capacity to respond to incidents.

• Document actions taken and issues identified during engagements.

• Offer customized, actionable recommendations to clients.

• Tackle complex technical challenges and develop innovative solutions in a client-facing environment.

• Guide clients through challenging business decisions, including prioritizing critical findings.

• Lead small teams on distinctive engagements.

• Mentor colleagues to enhance their skills.

• Play a significant role in advancing Bishop Fox’s consulting practice.

⛳️ Requirements

• Over 5 years of offensive security experience, supporting a range of adversary emulation engagements (red teaming and purple teaming) across various industries.

• Proficient understanding of all major operating systems, including Windows, MacOS, Linux, and ChromeOS.

• Specialization in Windows Active Directory exploitation and lateral movement techniques.

• Familiarity with cloud platforms (AWS/Azure/GCP) and container technologies (Kubernetes/Docker).

• Practical experience with command and control frameworks such as Sliver, Nighthawk, Mythic, and others.

• Background in custom tool and payload development, reverse engineering, and evasion strategies.

• Experience in researching and developing EDR evasion techniques.

• Proficient in several programming languages, ideally including Python, Golang, JavaScript/TypeScript, C#, C/C++, PowerShell, and/or Bash.

• Knowledge of network and web-related protocols, such as TCP/IP, HTTP, and HTTPS.

• Proven experience with social engineering, reconnaissance, and phishing/vishing tactics, along with an understanding of email security technologies and countermeasures.

• Experience in evaluating the security of AI systems, focusing on tool misuse, authorization and trust boundaries, and sensitive data exposure.

• Experience in developing and utilizing AI-enabled capabilities, including autonomous agents and multi-agent systems, to assist with reconnaissance, attack planning, and execution during Red Team engagements.

• Strong written and verbal communication skills.

• All new hires are required to pass a background check as a condition of employment.

• OSCP/E, CRTL/CRTO, GPEN, or GXPN certifications are advantageous but not mandatory.

🏝️ Benefits

• Generous Time Off and Company-Wide Holidays.

• Team Events and Opportunities for International Travel.

• Support for Remote Work.

• Monthly Allowance for Cell Phone and Internet Expenses.

• Training Budget to Foster Professional Development.

• Retirement Options, including 401k Matching for Traditional and Roth Accounts in the US.

• Health Insurance Options, including Medical, Dental, and Vision Coverage.

• Paid Parental Leave.