Offensive Security Consultant - Penetration Tester

Gulf Coast Automation Group; Chicago (IL); Remote; USD 130,000 - 150,000; Full time

Job summary

TalentFish is seeking an Offensive Security Consultant / Penetration Tester for a remote-friendly, full-time role in the United States. You will lead deep manual assessments, craft proof-of-concept tooling, and deliver remediation-focused findings to clients across diverse environments.

Ideal candidates have 5+ years of hands-on pentesting experience, strong domain depth (network/AD/web/cloud), and solid scripting skills. Remote work model with a competitive 130K–150K base plus bonus potential.

Qualifications

• 5+ years of hands-on experience in penetration testing, offensive security consulting, or red team operations.
• Depth in at least one major domain (network, Active Directory, web/API, cloud, or red teaming).
• A skills-based certification or equivalent practical proof of ability.
• Proficient with common industry tools and C2 frameworks.
• Scripting or coding ability useful for automation, tooling, or exploitation.
• Working knowledge of PTES, OWASP, MITRE Telecommunication/CK, and related references.
• Strong client-facing communication and ability to deliver with minimal supervision.

Responsibilities

• Lead manual penetration tests across network, web/API, cloud, wireless, thick client, and enterprise environments.
• Execute objective-based red team and adversary simulations when in scope.
• Develop custom proof-of-concept exploits, scripts, and tradecraft when existing tools are not enough.
• Produce clear reports with attack narratives, evidence, business impact, and prioritized remediation guidance.
• Contribute to methodology, tooling, lab work, research, and deliverables.
• Participate in project kickoff and report delivery meetings.
• Mentor by example through sound judgment, clean execution, and professional communication.
• Support clients through remediation: answer follow-up questions, validate fixes, and help their teams understand not just what was found, but why it matters.

Skills

Penetration testing

Red team

Cloud security

Active Directory

Scripting

PTES/OWASP/MITRE

Client-facing

Tools

C2 frameworks

Job description

Position: Offensive Security Consultant / Penetration Tester

Location: United States - Remote

Employment Type: Full Time

TalentFish is casting a line for experienced Penetration Testers. Our client is an established consulting firm focused on Cyber, Risk and Penetration testing. This role is open due to company growth and requires consultative Penetration testers. This is a not tool-heavy checkbox testing organization. We are fishing for Penetration testers who think like adversaries, pursue meaningful attack paths, and turn technical evidence into decisions clients can act on. We are looking for a consultant first mentality - testers who are focused on actual remediation and client solutions.
You are an experienced penetration tester who prefers deep manual work over scanner-driven checklists. You enjoy chaining findings, building proof-of-concept tooling, thinking like an adversary, and explaining technical risk clearly. You understand that the test isn't finished when the exploit lands, it's finished when the client understands their risk and knows how to fix it.
The person we're looking for: You combine technical depth with humility, curiosity, clear communication, strong judgment, and a bias toward practical solutions.

What You'll Do

• Lead manual penetration tests across network, web/API, cloud, wireless, thick client, and enterprise environments
• Execute objective-based red team and adversary simulation engagements when in scope
• Develop custom proof-of-concept exploits, scripts, and tradecraft when existing tools are not enough
• Produce clear reports with attack narratives, evidence, business impact, and prioritized remediation guidance
• Contribute to methodology, tooling, lab work, research, and deliverables.
• Participate in project kickoff and report delivery meetings
• Mentor by example through sound judgment, clean execution, and professional communication
• Support clients through remediation: answer follow-up questions, validate fixes, and help their teams understand not just what was found, but why it matters

What You Bring

• 5+ years of hands-on experience in penetration testing, offensive security consulting, or red team operations
• Depth in at least one major domain, such as network, Active Directory, web/API, cloud, or red teaming
• A skills-based certification or equivalent practical proof of ability
• Proficient with common industry tools and C2 frameworks
• Scripting or coding ability useful for automation, tooling, or exploitation
• Working knowledge of PTES, OWASP, MITRE Telecommunication&CK, and related offensive security references
• Strong client-facing communication and ability to deliver with minimal supervision. You can walk a systems administrator through a finding, brief an executive on business risk, and listen well enough to understand a client's environment and constraints before prescribing fixes

Bonus Points

• Previous experience conducting penetration testing in a consulting capacity
• Experience testing cloud, identity, EDR-protected endpoints, or mature enterprise networks
• Ability to translate offensive security findings into compliance-relevant risk and remediation guidance
• Experience with malware development, C2 framework enhancements, and EDR evasion
• Desire to contribute to blog and/or speak at industry conferences on occasion

What you can expect:

remote-first work, challenging client environments, uncapped quarterly performance bonus potential, paid training and certifications, conference opportunities, experienced teammates, and room to improve methodology.
Our client works as a high-trust, low-ego team that shares techniques, debriefs hard findings, challenges assumptions, and helps each other improve.
You will have room to go deep technically, improve methodology, contribute to research and tooling, and deliver work clients can rely on.

• US citizens and Green Card holders, EAD and TN are encouraged to apply. H1b sponsorship is not available for this role

Compenstation 130K to 150K + + base plus bonus.

TalentFish is an employee-owned company pioneering a new realm in talent acquisition. We are redefining IT staffing by evolving AI, video screening, and our unique platform. TalentFish focuses on providing the best employee, consultant, and client experience possible.
At TalentFish we are an Equal Opportunity Employer; we embrace and encourage diversity!