Security Consultant

Havens Group; Kansas City (MO); On-site; USD 100,000 - 218,000; Full time

Benefits offered by this job

401(k) with match

Training/cert budget

Performance-based bonuses

Medical insurance

Vision insurance

Paid maternity and paternity leave

Tuition assistance

Job summary

Une entreprise innovante recherche un consultant en sécurité offensive pour évaluer les vulnérabilités de ses clients. Vous utiliserez des outils avancés pour effectuer des tests d'attaque, tout en aidant les entreprises à comprendre et à renforcer leur sécurité. Des certifications en sécurité démontrant votre expertise sont essentielles, et une rémunération compétitive est offerte, avec des bonus basés sur la performance.

Qualifications

• 3-5 ans d'expérience en sécurité offensive.
• Certifications pertinentes (OSCP, OSWE) requises.
• Capacité à agir sous pression et à écrire des rapports clairs.

Responsibilities

• Exécuter des tests d'attaque complets sur divers systèmes.
• Exploiter des faiblesses d'Active Directory et dans le cloud.
• Rédiger des rapports détaillés avec des recommandations d'amélioration.

Skills

Red Teaming

Adversary Emulation

Active Directory Escalation

Report Writing

Cloud Security

Education

Certifications like OSCP, OSWE, eCPTX

Tools

Cobalt Strike

Sliver

Empire

Job description

This range is provided by Havens Group . Your actual pay will be based on your skills and experience — talk with your recruiter to learn more.

Base pay range

$100,000.00/yr - $218,000.00/yr

Additional compensation types

Annual Bonus

Direct message the job poster from Havens Group

Founder Havens Group, Co-Founder KC Executives. Since 2012, providing Executive and Technology Talent Solutions

Offensive Security Consultant - This Job Is Technically Legal. Barely.

Our Client Breaks into companies.

Exploit their blind spots.

Get PAID “by them” to say, Thank You Sir, May I Have Another".

Then walk them through the carnage as if it were a postgame film review.

Sound fun? Good — you're the offensive red teamer we’ve been running plays for.

We’re hiring for our client a crew that doesn’t do security theater.

No bloated dashboards. No fake “zero trust” marketing.

Just full-send adversary emulation, real TTPs, and the occasional client panic email that reads: “How the hell did you get in... and why is your beacon still alive?”

• Babysitting a SIEM while pretending to be busy

• Tuning policies no one reads

• Running Nessus for the fifth time, hoping someone noticed

You will be:

• Living in Cobalt Strike, Sliver, Empire, or your custom-built chaos
• Escalating in Active Directory with precision — identifying weak links, moving laterally, and owning the domain before blue teams blink
• Writing reports that matter — clear, actionable, and brutal enough to drive real change that say, “Here’s how we broke it, and here’s how to stop someone worse.”

Certs That Prove You’ve Bled for It:

We’re looking for operators who didn’t just pass — they endured certs that test real-world skill, patience, and pain tolerance. If your weekends have been spent pivoting in a lab environment while eating cold pizza at 2am, we see you.

• OSCP, OSWE, OSEP, OSED, OSCE3: Offensive Security’s elite lineup — the gold standard for hands-on exploitation. You’ve been tested on live boxes, bypassed defenses under pressure, and still had time to write the damn report.
• eCPTX, ePPTv2, eWPTXv2: eLearnSecurity’s advanced certs — strong signals that you know red teaming, advanced pivoting, and web app attacks that go beyond the OWASP Top 10.
• Cloud Red Teaming Certs (AWS, GCP, Azure): You understand IAM abuse, metadata exploitation, and misconfigured buckets like they’re second nature — and you’ve got the credentials to prove it.

Bonus Points If You’ve Got War Stories:

• Published a CVE — Even better if it forced a vendor to push a patch faster than they wanted.
• Dropped a tool on GitHub — Not something that collects dust. Something that gets forks, stars, and shows up in real ops.
• Spoken at DEFCON, Black Hat, or anywhere that makes blue teams sweat — We love operators who can hack and talk about it.

What You’ll Be Doing (For You KC Chiefs Fans).

• Big Red's Game Plan: Running full-scope black-box tests the way Andy Reid scripts a playoff drive — cloud, wireless, internal, external — every surface mapped, every weakness exploited with precision.
• 13 Seconds of Silence: Evading EDR like Mahomes shredded the Bills in 13 seconds — fast, unpredictable, and already two steps deeper before detection even wakes up.
• Seam Route Exploitation: Hitting AD misconfigs, cloud oversights, and exposed endpoints, like Mahomes threads a no-look pass to Kelce — unguarded, surgical, and devastating.
• Pocket Collapse Reporting: Delivering reports with the impact of Chris Jones on 3rd and long — no fluff, no filler, just clean, brutal truth that leaves blue teams gasping for air.

Compensation & Perks (Kansas City 2025)

• Mid-Level (3–5 yrs): $100K–$120K + up to 15% bonus
• Senior (5–8 yrs): $125K–$145K + up to 20% bonus
• Lead/Principal (8+ yrs): $150K–$175K + up to 25% bonus
• Total comp: $110K–$218K+, depending on skill and red zone performance

• 401(k) with match

• Training/cert budget (because we want you sharper)

• Performance-based bonuses tied to certs, client impact, and how badly you dismantled the last engagement

TL;DR:

If you’ve got the mindset, the moves, and the technical swagger of a Mahomes with 13 seconds left on the clock, send us your digital highlight reel. Resume, GitHub, write-ups, CVEs, and even redacted logs, if you’ve them. Your info stays confidential. Our client stays anonymous. Just like your best work.

Seniority level

• Seniority level

  Mid-Senior level

Employment type

• Employment type

  Full-time

Job function

• Job function

  Information Technology

• Industries

  Computer and Network Security

Referrals increase your chances of interviewing at Havens Group by 2x

Inferred from the description for this job

Medical insurance

Vision insurance

401(k)

Paid paternity leave

Paid maternity leave

Tuition assistance

Get notified about new Security Consultant jobs in Kansas City Metropolitan Area.

Consultant - Attack and Penetration | Remote, USA

Cyber Security Risk Analyst 2 (3rd Party Risk)

Sr. Consultant - Attack and Penetration | Remote, USA

Senior Manager, Security Risk and Compliance

Merriam, KS
$95,000.00
-
$110,000.00
1 day ago

Kansas City, MO
$52,000.00
-
$68,000.00
2 months ago

Kansas City, MO
$52,000.00
-
$68,000.00
2 months ago

Lawrence, KS
$52,000.00
-
$68,000.00
2 months ago

Baldwin City, KS
$52,000.00
-
$68,000.00
2 months ago

Lawrence, KS
$52,000.00
-
$68,000.00
3 months ago

Manager, Information Security Innovation Engineer (Automation and Innovation)

Sr. Information Security Risk Analyst (Hybrid)

Kansas City, MO $69,230 - $149,000 1 day ago

Identity Information Systems Security Engineer

Kansas City, MO $88,500 - $132,800 3 days ago

Program Security Officer (PSO) (Industrial Security Analyst 3) 22530

St Joseph, MO $61,868 - $95,000 2 months ago

We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.