Managing Consultant – Red Team

Job Description: - Participate directly in red team, purple team, and social engineering engagements.

• Divide time approximately equally between technical delivery and management responsibilities.
• Support the performance and development of direct reports.
• Work alongside consultants to maintain technical proficiency and understand delivery challenges.
• Build trusted relationships with consultants and clients.
• Provide coaching and address performance concerns.
• Partner with the Practice Director to improve team operations.
• Lead or provide thought leadership to security consultants delivering engagements for clients.
• Develop red team attack scenarios and purple team test cases tied to client objectives.
• Produce and review assessment reports with actionable recommendations and technical evidence.

Requirements: - Demonstrated experience managing people, including providing regular feedback, supporting career development, and addressing performance concerns.

• Experience mentoring technical practitioners through hands-on collaboration and guiding them to take on greater responsibility.
• Ability to give and receive candid feedback, work through disagreements professionally, and maintain productive relationships.
• Experience addressing internal and client concerns, coordinating resolution, and recognizing when additional support or authority is needed.
• Experience coordinating staffing needs and development opportunities with appropriate departments or business units.
• At least five years of offensive security experience delivering adversary emulation engagements, including red team and purple team assessments, for clients across multiple industries.
• Experience developing red team attack scenarios and purple team test cases tied to client objectives.
• Demonstrated operational security judgment based on assessment objectives, detection risk, and potential client impact.
• Ability to produce and review accurate assessment reports with actionable recommendations and technical evidence.
• Experience improving red team capabilities and methodologies.
• Expertise in Active Directory exploitation and lateral movement.
• Working knowledge of Windows, macOS, and Linux.
• Working knowledge of AWS, Azure, GCP, Microsoft 365, and Google Workspace.
• Working knowledge of Kubernetes and Docker.
• Hands-on experience with C2 frameworks such as Sliver and Mythic.
• Experience developing and modifying custom tools and payloads, applying EDR evasion techniques, and using reverse engineering.
• Proficiency in multiple programming and/or scripting languages such as Python, Go, C#, C++, PowerShell, or Bash.
• Ability to analyze network and application communications.
• Experience conducting social engineering assessments, including reconnaissance and phishing and vishing pretexts, with an understanding of countermeasures.
• Preferred: Experience conducting physical security assessments, or interest in developing that capability with training and mentorship.
• All new hires must pass a background check as a condition of employment.

Benefits: - Generous Time Off and Company-Wide Holidays

• Team Events and International Travel Opportunities
• Work From Home Support
• Monthly Allowance for Cell Phone and Internet
• Training Budget
• Retirement; 401k Matching for Traditional and Roth Accounts in the US
• Health Insurance Options Including Medical, Dental, Vision
• Paid Parental Leave
• Inclusive culture and Equal Opportunity employment