Offensive Security Consultant

Job Description: - Plan and conduct offensive security engagements ranging in size, scope, focus, and approach

• Communicate findings, attack paths, recommendations, and strategy to technical and executive client stakeholders through written reports and verbal presentations
• Build scripts, tools, or methodologies to enhance offensive services
• Serve as a subject matter expert in initial access, open-source intelligence analysis, adversary tradecraft, offensive Windows/Linux/macOS operations, evasion operations, or technical capability development
• Utilize common offensive security testing tools and tradecraft
• Stay up to date with cutting-edge adversary tradecraft and vulnerabilities
• Communicate successes and obstacles with fellow team members and team leads
• Interface with client contacts and staff constructively and professionally
• Coordinate and prepare for internal and customer-facing meetings
• Assist with scoping prospective engagements, technical testing from kickoff through remediation, and mentoring less experienced staff
• Train team members in adversary Tactics, Techniques, and Procedures (TTPs) and tools
• Contribute to and improve SpecterOps training-course content and assist with course delivery

Requirements: - Ability to travel domestically and internationally, up to an average of 25% annually

• Must be able to pass a criminal background check
• Working knowledge of offensive security concepts and assessments
• Working knowledge of security principles, policies, and industry best practices
• Working knowledge of Windows and *NIX-based operating systems
• Working knowledge of networking concepts
• Working knowledge of Active Directory
• Working knowledge of programming or scripting languages such as C#/.NET, C++, Python, PowerShell, and Bash
• Aptitude for technical writing, including assessment reports, presentations, and operating procedures
• Proficient written/verbal communication and interpersonal skills
• Ability to independently contribute to significant services and projects
• Ability to lead small teams and engagements
• Ability to manage multiple projects simultaneously
• Ability to communicate effectively with clients, team members, and management for project delivery
• Ability to manage client projects with limited supervision
• Willingness to lead and execute offensive security offerings including red team, penetration testing, web application security assessment, cloud security assessment, and offensive maturity assessment
• Willingness to develop and deliver training content as a lead course instructor
• Willingness to mentor and train fellow consultants

Benefits: - Health/Dental/Vision/life insurance: 100% covered for both the employee and their family

• Flexible time off policy
• 13 paid holidays annually
• 401(k) with up to 4% company match
• Equity and quarterly bonuses based on company performance
• Remote work: $1,500 first year allowance to set up home office
• $500 annual home office allowance after first year
• $150 monthly cell phone and internet reimbursement
• $5,000 annual professional development allowance
• $5,250 towards continuing education or student loan repayment
• $1,200 annual budget for lifestyle, wellness, pet insurance and more
• A one-time $10,000 benefit towards family planning
• Open intellectual property policies; allow researchers to retain rights over open-sourced research & tools
• In person and virtual employee events throughout the year
• Company swag