Red Team Principal Consultant

Accountabilities:

Lead and coordinate Red Team engagements, penetration testing projects, and adversary simulation activities designed to evaluate customer security defenses.
Manage assessment activities that simulate known threat actors and analyze their potential to achieve objectives across the Cyber Kill Chain and MITRE ATT&CK Framework.
Serve as a primary point of contact for Red Team engagements, coordinating project scope, resources, timelines, and execution strategies.
Oversee penetration testing assessments across operating systems, applications, databases, and network infrastructure to identify security weaknesses and potential attack paths.
Participate in hands-on security assessments while managing multiple penetration testing engagements and different types of consulting assignments.
Develop comprehensive assessment reports, translating technical findings into clear insights, risk assessments, and actionable mitigation strategies for both executive and technical audiences.
Communicate assessment results, recommendations, and project progress effectively to senior leadership, technical teams, and other relevant stakeholders.
Collaborate with cybersecurity and professional services teams to improve customers' information security programs, defensive capabilities, and security resources.
Provide specialized technical guidance during enterprise-wide crisis situations, including major production service disruptions and incidents requiring support outside standard change management processes.
Mentor, support, and develop less experienced Red Team consultants, encouraging technical excellence, knowledge sharing, and continuous professional growth.
Contribute to the continuous improvement of assessment methodologies, technical resources, and operational practices.
Requirements:
At least 5 years of professional experience in Red Team operations, penetration testing, vulnerability assessments, or adversary emulation, strongly preferred.
At least 1 year of experience in a technical leadership or team management role, preferably within cybersecurity consulting or security assessment environments.
Advanced hands-on experience with security assessment and penetration testing tools such as Metasploit, Nmap, Cobalt Strike, Nessus, and Burp Suite.
Comprehensive understanding of cybersecurity methodologies, security technologies, industry standards, and defensive best practices.
Strong technical knowledge of Windows, Linux, UNIX, and macOS operating systems.
Advanced understanding of networking infrastructure and components, including routers, switches, load balancers, and wireless access points.
In-depth knowledge of firewalls, proxy servers, mail servers, web servers, and enterprise network architectures.
Extensive experience providing operational support for operating systems, applications, and network environments.
Proven expertise in Red Team operations, vulnerability assessments, penetration testing, and adversary emulation exercises.
Strong experience with automation and scripting for applications, systems, and security testing workflows.
Proven experience using AI technologies to enhance decision-making, streamline workflows and processes, improve efficiency, and drive business outcomes.
Excellent communication and presentation skills, with the ability to explain complex technical concepts and security findings to both technical and non-technical audiences.
Strong leadership, organizational, and project management capabilities, including the ability to coordinate multiple engagements and guide technical teams.
Ability to work independently, exercise sound judgment, and deliver high-quality results in a dynamic consulting environment.
Active participation in the cybersecurity community is highly desirable, including speaking at industry conferences, contributing to open-source security tools, or supporting security research initiatives.
Relevant professional certifications are desirable, including OSCP, GPEN, OSCE, GCIH, or GXPN.
Willingness and ability to travel occasionally, with travel expected to remain below 25%.
Benefits:
Competitive compensation: Annual base salary ranging from $140,000 to $200,000, depending on relevant experience, qualifications, skills, and location.
Eligibility for additional performance-based bonuses and equity grants.
Comprehensive healthcare coverage, including health insurance.
Retirement savings benefits through a 401(k) plan.
Competitive paid time off and vacation policies to support work-life balance.
Paid parental and adoption leave.
Comprehensive physical and mental wellness programs.
Professional development and career advancement opportunities for employees at every level.
Opportunities to expand technical expertise through continuous learning, cybersecurity training, and exposure to advanced security technologies.
Employee resource networks, regional communities, and volunteering opportunities that encourage professional connections and collaboration.
Flexible remote working arrangements within the United States.
An inclusive, collaborative, and innovation-driven working environment that values employee autonomy, experimentation, and continuous improvement.