Cyber Resilience & Red Teaming Senior Associate

Alvarez & Marsal; Houston (TX); Hybrid; USD 110,000 - 150,000; Full time

Job summary

Alvarez & Marsal is seeking a Senior Associate in Global Cyber Risk Services (GCRS) to advance hands-on security testing. You will perform adversarial testing across networks, apps, and identities, emulate attackers, and work with client security teams to improve prevention, detection, and response.

You will lead offensive engagements, contribute to tooling, and mentor junior consultants, while coordinating with incident response and governance lines of service.

Qualifications

• 3–6 years of offensive security experience (penetration testing or red teaming).
• Active Offensive Security Certified Professional (OSCP) certification required.
• Experience performing tests across network, web app, and Active Directory environments.

Responsibilities

• Plan and perform hands-on penetration tests across external/internal networks, web apps, APIs, and AD.
• Plan and execute red team engagements aligned to the MITRE ATT&CK framework.
• Develop and customize tooling for testing, including scripts and payloads.
• Conduct cloud penetration tests across AWS, Azure, and GCP.
• Run purple team exercises with client SOC to improve detection and response.
• Produce clear reports with risk narratives and prioritized remediation guidance.

Skills

Adversarial mindset

Ethical practice

AI systems awareness

Communication skills

Mentoring

Tool development

Autonomy

Education

Bachelor's degree in Computer Science, Cybersecurity, Information Systems, or related field

OSCP certification

Tools

Burp Suite

Nmap

Metasploit

BloodHound

Impacket

Cobalt Strike

Sliver

Mythic

Havoc

Job description

Alvarez & Marsal is seeking a Senior Associate in Global Cyber Risk Services (GCRS) to advance hands-on security testing. You will perform adversarial testing across networks, apps, and identities, emulate attackers, and work with client security teams to improve prevention, detection, and response.

You will lead offensive engagements, contribute to tooling, and mentor junior consultants, while coordinating with incident response and governance lines of service.