Senior Offensive Security Consultant

Jobtailor

Connecticut

On-site

USD 80,000 - 110,000

Full time

6 days ago

Be an early applicant

Get more replies from employers

Send a job-specific resume in minutes.

Job summary

Crowe is seeking a cybersecurity consultant in the United States to lead or support offensive security engagements, including penetration testing of networks, web applications, and wireless systems. The role covers red/purple teaming, risk assessments, and delivering remediation guidance.

You will communicate findings to IT, executives, and board-level stakeholders, mentor junior staff, and contribute to practice development and thought leadership within Crowe.

Qualifications

Bachelor’s degree in information systems, Computer Science, Cybersecurity, Engineering, or related field.
2+ years of experience in cybersecurity, offensive security, or related consulting or industry roles.
Deep working knowledge of Windows, Linux/Unix, and databases such as SQL and Oracle.
Working knowledge of networks and the seven-layer OSI model.
Proficiency with offensive security tools and frameworks such as Metasploit, Burp Suite, BloodHound, and Nmap.
Detection engineering or blue team operations knowledge, including evasion techniques.
Strong scripting or programming skills.
Experience with or curiosity about AI and automation tools in cybersecurity, including secure implementation practices and risk assessments.
Progress toward or possession of certifications such as CISSP, OSCP, OSCE, or similar preferred
Strong project management, critical thinking, and interpersonal skills.
Excellent communication and technical writing skills, with ability to tailor messages to technical and executive audiences.
Ability to uphold Crowe’s values and act ethically and with integrity
Must verify identity and eligibility to work in the United States
Crowe is not sponsoring work authorization

Responsibilities

Lead or support internal and external network penetration testing engagements.
Conduct web application and wireless penetration testing.
Perform social engineering, including phishing, telephone, and onsite exercises.
Conduct red teaming/threat emulation and purple teaming.
Evaluate IT controls, application controls, security configurations, and interface/integration security.
Provide practical vulnerability remediation recommendations.
Conduct cybersecurity assessments using NIST CSF, NIST 800.53, CIS, and integrated control frameworks.
Present findings and recommendations to IT, Information Security, C-suite, and board-level stakeholders.
Lead or support client program execution, including control implementation, metrics/reporting, issue remediation, and continuous improvement.
Mentor and supervise junior consultants.
Contribute to team development, internal knowledge-sharing, practice development, methodology innovation, and thought leadership.

Skills

Penetration testing

Offensive security

Cybersecurity assessments

Project management

Technical writing

Communication

Interpersonal skills

Education

Bachelor’s degree in information systems, Computer Science, Cybersecurity, Engineering, or related field

Tools

Metasploit

Burp Suite

BloodHound

Nmap

AI Tools

Automation Tools

Job description

Lead or support internal and external network penetration testing engagements
Conduct web application and wireless penetration testing
Perform social engineering, including phishing, telephone, and onsite exercises
Conduct red teaming/threat emulation and purple teaming
Evaluate IT controls, application controls, security configurations, and interface/integration security
Provide practical vulnerability remediation recommendations
Conduct cybersecurity assessments using NIST CSF, NIST 800.53, CIS, and integrated control frameworks
Present findings and recommendations to IT, Information Security, C-suite, and board-level stakeholders
Lead or support client program execution, including control implementation, metrics/reporting, issue remediation, and continuous improvement
Mentor and supervise junior consultants
Contribute to team development, internal knowledge-sharing, practice development, methodology innovation, and thought leadership

Requirements

Bachelor’s degree in information systems, Computer Science, Cybersecurity, Engineering, or related field
2+ years of experience in cybersecurity, offensive security, or related consulting or industry roles
Deep working knowledge of Windows, Linux/Unix, and databases such as SQL and Oracle
Working knowledge of networks and the seven-layer OSI model
Proficiency with offensive security tools and frameworks such as Metasploit, Burp Suite, BloodHound, and Nmap
Detection engineering or blue team operations knowledge, including evasion techniques
Strong scripting or programming skills
Experience with or curiosity about AI and automation tools in cybersecurity, including secure implementation practices and risk assessments
Progress toward or possession of certifications such as CISSP, OSCP, OSCE, or similar preferred
Strong project management, critical thinking, and interpersonal skills
Excellent communication and technical writing skills, with ability to tailor messages to technical and executive audiences
Ability to uphold Crowe’s values and act ethically and with integrity
Must verify identity and eligibility to work in the United States
Crowe is not sponsoring work authorization

Core Competencies

Demonstrates expertise in cybersecurity assessments, penetration testing, and vulnerability remediation, with a strong foundation in offensive security tools and frameworks. Capable of effectively communicating findings to diverse stakeholders and mentoring junior team members.

Highest-signal resume keywords