Senior Cyber Resilience & Red Teaming — Hands-On

Alvarez & Marsal; New York (NY); On-site; USD 85,000 - 120,000; Full time

Benefits offered by this job

Healthcare plans

401(k) retirement savings

Paid time off

Parental leave

Job summary

Alvarez & Marsal (A&M) is seeking a Senior Associate in Global Cyber Risk Services to lead hands-on penetration tests and adversary emulation across networks, apps, and cloud, including AI-enabled systems. You will design attack simulations, develop tooling, and mentor junior staff while communicating risk to executives.

You will work in a fast‑paced team, travel as needed, and contribute to threat modeling, discovery of vulnerabilities, and remediation planning for diverse clients in the United

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, or related field; ~3–6 years of relevant offensive security experience.
• Active OSCP certification or equivalent, with hands‑on testing across network, web apps, and AD.

Responsibilities

• Plan and perform hands-on penetration tests across external and internal networks, web apps, APIs, mobile apps, and identity environments.
• Execute red team and adversary emulation engagements aligned to MITRE ATT&CK, including initial access and lateral movement.
• Develop and customize offensive tooling; craft payloads and automate testing while adhering to scope and safety.
• Conduct cloud penetration tests and configuration analysis across AWS, Azure, and GCP.
• Run purple team exercises with client SOCs to improve detection, logging, and response.
• Produce clear reports and executive readouts with prioritized remediation guidance.

Skills

OSCP

Penetration testing

Scripting

MITRE ATT&CK

Report writing

Travel flexibility

Education

Bachelor’s degree in Computer Science / Cybersecurity / Information Systems

Tools

Burp Suite

Nmap

Metasploit

Cobalt Strike

Sliver

BloodHound

Mythic

Job description

Alvarez & Marsal (A&M) is seeking a Senior Associate in Global Cyber Risk Services to lead hands-on penetration tests and adversary emulation across networks, apps, and cloud, including AI-enabled systems. You will design attack simulations, develop tooling, and mentor junior staff while communicating risk to executives.

You will work in a fast‑paced team, travel as needed, and contribute to threat modeling, discovery of vulnerabilities, and remediation planning for diverse clients in the United