This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for an Associate Offensive Security Consultant based in the United States.
As an Associate Offensive Security Consultant, you will join a highly technical consulting environment focused on adversary simulation and offensive security.
You will contribute to red team assessments, penetration tests, offensive maturity assessments, web application testing, and specialized security engagements.
The role offers hands-on exposure to diverse client environments, from developing operational tools to presenting findings to technical and executive audiences.
You will work alongside experienced security professionals while building expertise across offensive tradecraft, operating systems, Active Directory, and security tooling.
The position also provides opportunities to support training, research, methodology development, and internal offensive security programs.
As you grow, you will develop subject-matter expertise while contributing meaningful improvements to client security and the broader information security community.
This is a remote U.S.-based opportunity with periodic travel for company events, client needs, and other meetings.
Accountabilities:
- Plan and participate in offensive security engagements across varying sizes, scopes, objectives, and methodologies, including red team assessments, penetration tests, and specialized security assessments.
- Execute offensive security testing using established tools, techniques, and adversary tradecraft across diverse client environments.
- Communicate attack paths, findings, risks, recommendations, successes, and obstacles clearly to both technical stakeholders and executive audiences through written reports and presentations.
- Develop scripts, tools, techniques, and methodologies that improve the effectiveness and efficiency of offensive security services.
- Develop expertise in at least one key area, such as initial access, open-source intelligence, adversary tradecraft, Windows/Linux/macOS operations, evasion, or technical capability development.
- Participate in engagement scoping, kickoff activities, technical testing, remediation discussions, and customer-facing meetings.
- Collaborate closely with consultants, team leads, and client personnel in a constructive and professional manner.
- Contribute to internal knowledge sharing and mentor less experienced team members as capabilities develop.
- Train colleagues on adversary tactics, techniques, procedures (TTPs), and offensive security tools.
- Contribute to the development and improvement of training content and assist with course delivery, including instruction, laboratory support, and student questions.
- Stay current with emerging vulnerabilities, offensive techniques, adversary behaviors, and developments across the information security landscape.
- Contribute to research and community initiatives through technical articles, conference presentations, open-source tools, white papers, and other forms of knowledge sharing.
Requirements
- Foundational knowledge of offensive security concepts, security assessments, security principles, policies, and industry best practices.
- Working knowledge of Windows and Unix/Linux-based operating systems, networking concepts, and Active Directory.
- Working knowledge of at least one programming or scripting language, such as C#/.NET, C++, Python, PowerShell, or Bash.
- Strong technical aptitude and a genuine desire to continuously learn, improve, and develop deeper expertise in offensive security.
- Ability to produce clear, professional technical documentation, including assessment reports, presentations, operating procedures, and other written deliverables.
- Strong written and verbal communication skills, with the ability to interact effectively with both technical and executive stakeholders.
- Excellent organization, self-direction, problem-solving ability, and interpersonal skills.
- Willingness to embody values centered on curiosity, continuous improvement, empathy, sustainability, humility, empowerment, and transparency.
- Ability to travel domestically and internationally, averaging up to approximately 25% annually.
- Ability to successfully complete a criminal background check.
- Must be authorized to work and reside in the United States; immigration visa sponsorship is not currently available.
- A bachelor's degree in a technical discipline is a plus but not required.
- Experience supporting security assessments for large enterprises or federal organizations is advantageous.
- Experience administering, attacking, or defending Windows/Active Directory, Linux, and/or macOS environments is a plus.
- Prior experience in technical writing, information security consulting, technical training, or service-based cybersecurity environments is beneficial.
- Public contributions to the information security community, such as conference talks, blog posts, white papers, or open-source security tools, are valued.
- A demonstrated interest in teaching, training, research, and sharing offensive security knowledge is highly desirable.
Benefits
- Salary: $100,000–$125,000 annual base salary, depending on experience.
- Remote work: U.S.-based remote position with a $1,500 first-year home office setup allowance.
- Home office support: $500 annual home office allowance after the first year.
- Communication expenses: $150 monthly reimbursement for cell phone and internet costs.
- Healthcare: 100% company-paid health, dental, vision, and life insurance for employees and their families.
- Time off: Flexible paid time off policy plus 13 paid holidays annually.
- Retirement: 401(k) plan with up to a 4% company match.
- Performance rewards: Equity opportunities and quarterly bonuses based on company performance.
- Professional development: $5,000 annual professional development allowance.
- Education support: Up to $5,250 annually toward continuing education or student loan repayment.
- Lifestyle and wellness: $1,200 annual budget that can be used toward lifestyle, wellness, pet insurance, and related benefits.
- Family planning: One-time $10,000 family planning benefit.
- Research freedom: Open intellectual property policies that allow researchers to retain rights to open-source research and tools.
- Community and culture: In-person and virtual employee events throughout the year, plus company merchandise.
- Travel: Quarterly in-person company events and additional travel opportunities based on client and business needs.
How Jobgether works:
We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.
We appreciate your interest and wish you the best!
Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.
#LI-CL1
