Offensive Security Lead — Pen Testing & Red Team

Crowe; Grand Rapids (MI); On-site; USD 105,000 - 214,000; Full time

Job summary

Crowe in the United States is seeking an Offensive Security Manager to lead and deliver high-value cybersecurity engagements across industries. You will work with the Cybersecurity team to perform advanced offensive security assessments, manage client relationships, and mentor junior consultants.

The role requires 5+ years in cybersecurity, relevant certifications, and strong scripting. You will evolve program maturity, align with governance, and contribute to practice development.

Qualifications

• Bachelor's degree in information systems, Computer Science, Cybersecurity, Engineering, or related field.
• Certification such as CISSP, OSCP, OSCE, or similar.
• 5+ years of experience in cybersecurity, offensive security, or related consulting or industry roles.
• Deep working knowledge of operating systems (Windows, Linux/Unix) and databases (SQL, Oracle, etc.).
• Working knowledge of networks and the seven layer OSI model.
• Proficiency with common offensive security tools and frameworks (e.g., Metasploit, Burp Suite, BloodHound, Nmap, etc.).
• Detection engineering or blue team operations knowledge including evasion techniques
• Strong scripting or programming skills.
• Experience with or curiosity about AI and automation tools in cybersecurity, including secure implementation practices and risk assessments.

Responsibilities

• Lead or support Offensive Security engagements including: Internal and external network penetration testing, Web application penetration testing, Wireless penetration testing, Social engineering, Red teaming/Threat emulation, Purple teaming.
• Evaluate and test IT controls, application controls, security configurations, and interface/integration security.
• Provide practical recommendations for vulnerability remediation.
• Conduct cybersecurity assessments across a variety of standards/frameworks (NIST CSF, NIST 800.53, CIS, integrated control frameworks, etc.) and present findings to stakeholders.
• Serve as an extension of client teams to lead or support program execution activities, including control implementation, metrics/reporting, issue remediation, and continuous improvement initiatives.
• Mentor and supervise junior consultants; contribute to team development and internal knowledge-sharing.
• Participate in practice development, including service line/methodology innovation and thought leadership.

Skills

Leadership

Communication

Critical thinking

Mentoring

Education

Bachelor's degree in information systems, Computer Science, Cybersecurity, Engineering, or related field

CISSP/OSCP/OSCE or similar certifications

Tools

Metasploit

Burp Suite

BloodHound

Nmap

Job description

Crowe in the United States is seeking an Offensive Security Manager to lead and deliver high-value cybersecurity engagements across industries. You will work with the Cybersecurity team to perform advanced offensive security assessments, manage client relationships, and mentor junior consultants.

The role requires 5+ years in cybersecurity, relevant certifications, and strong scripting. You will evolve program maturity, align with governance, and contribute to practice development.