Senior Security Consultant, Red Team

Jobgether SRL; United States; Hybrid; USD 75,000 - 150,000; Full time

Benefits offered by this job

Competitive compensation

Remote work flexibility

Global travel opportunities

Office option

Collaborative environment

Job summary

Partner Company is seeking a Senior Security Consultant, Red Team in the United States to conduct advanced offensive security engagements across enterprise environments. You will drive Red Team and Purple Team campaigns, combining exploitation, social engineering, and physical security testing while collaborating with global teams.

The role emphasizes developing custom tooling, mentoring consultants, and delivering executive-ready findings.

Qualifications

• Significant experience leading covert Red Team operations including adversarial emulation, post-exploitation, social engineering, and physical security testing.
• Strong penetration testing across network, web, wireless, physical security, and social engineering.
• Hands-on experience with C2 and post-exploitation frameworks such as Cobalt Strike, Empire, Metasploit, Throwback.
• Scripting/programming in Python, Ruby, PowerShell, Java, or Shell.
• Deep knowledge of Windows, Active Directory, Linux, and enterprise network architectures.
• Ability to translate complex vulnerabilities into actionable security outcomes.
• Knowledge of OS, service, and application hardening practices.
• Excellent communication and presentation skills for varied audiences.
• Willingness to travel at least 50% of the time.

Responsibilities

• Lead Red Team and Purple Team campaigns for clients, remotely and on-site across complex enterprises.
• Conduct adversarial emulation, assumed-breach scenarios, post-exploitation, social engineering, and physical security assessments.
• Identify assets, vulnerabilities, attack paths, and exploitation opportunities across people, processes, apps, networks and infrastructure.
• Perform advanced penetration testing across networks, web apps, wireless, physical security, and social engineering.
• Develop and use custom tools, scripts, and exploits to meet engagement objectives.
• Manage project priorities, deliverables, and deadlines with distributed teams.
• Convey complex vulnerabilities and business risks to technical and executive stakeholders.
• Produce detailed reports with findings, evidence, and recommendations.
• Lead client presentations and participate in meetings and business development.
• Provide technical leadership, coaching, and mentorship to teams.
• Contribute to security research, whitepapers, and industry thought leadership.

Skills

Penetration testing

Adversarial emulation

Windows administration

Linux administration

Cobalt Strike

Empire

Metasploit

Python

PowerShell

Communication skills

Technical leadership

Travel readiness

Tools

Cobalt Strike

Empire

Metasploit

Throwback

Job description

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Security Consultant, Red Team based in United States .

This role is an opportunity to conduct sophisticated offensive security engagements designed to help organizations prepare for real-world cyber threats. You will work as part of Red and Purple Team engagements, combining technical exploitation, adversarial emulation, social engineering, and physical security testing. Your work will span the full attack lifecycle, from reconnaissance and initial access through post-exploitation and objective execution. You will collaborate with highly technical security professionals across multiple time zones and communicate findings directly to both technical and executive audiences. The role also provides opportunities to develop custom offensive security tooling, mentor consultants, and contribute to industry research. With significant client interaction and frequent international travel, this is a high-impact position for an experienced red team professional who thrives on complex challenges.

• Participate in and lead Red Team and Purple Team campaigns for clients, working both remotely and on-site across complex enterprise environments.

• Conduct adversarial emulation, assumed-breach scenarios, post-exploitation, social engineering, and physical security assessments to simulate realistic attack paths and identify critical weaknesses.

• Perform reconnaissance and identify critical assets, vulnerabilities, attack paths, and opportunities for exploitation across people, processes, applications, networks, and infrastructure.

• Execute sophisticated penetration testing across network, web application, wireless, physical security, and social engineering environments.

• Develop and use custom tools, scripts, proof-of-concept exploits, and offensive techniques to support engagement objectives.

• Manage project activities, priorities, deliverables, and deadlines while collaborating with geographically distributed teams across multiple time zones.

• Clearly communicate complex technical vulnerabilities and business risks to both technical specialists and non-technical client stakeholders.

• Produce comprehensive technical reports documenting findings, attack paths, business impact, evidence, and actionable recommendations for improving security posture.

• Lead technical presentations for clients and participate in project meetings, conference calls, and business development activities when required.

• Provide technical leadership, coaching, and mentorship to consulting teams and clients on offensive security and broader cybersecurity topics.

• Contribute to the security community through technical presentations, whitepapers, research, and other thought-leadership initiatives.

Requirements:

• Bring significant experience performing and leading covert Red Team operations, including adversarial emulation, assumed-breach scenarios, post-exploitation, social engineering, and physical security testing.

• Demonstrate strong penetration testing experience across network infrastructure, web applications, wireless environments, physical security, and social engineering.

• Have hands-on experience with Command and Control (C2) and post-exploitation frameworks such as Cobalt Strike, Empire, Metasploit, Throwback, or comparable tools.

• Possess strong scripting or programming capabilities in several relevant languages, such as Python, Ruby, PowerShell, Java, or Shell.

• Have a strong understanding of enterprise network, system, and application architecture, including complex environments built around Microsoft Windows, Active Directory, and Linux.

• Demonstrate deep knowledge of Windows and Linux system administration and post-exploitation techniques across both platforms.

• Be highly capable of identifying vulnerabilities, developing proof-of-concept exploits, and translating technical findings into meaningful security outcomes.

• Bring strong knowledge of operating system, service, and application hardening practices.

• Have excellent communication and presentation skills, with the ability to make complex technical topics accessible to audiences at different levels of an organization.

• Be comfortable working in client-facing environments and providing technical leadership during security engagements.

• Be willing and able to travel at least 50% of the time, including both domestic and international travel.

• Demonstrate curiosity, creativity, integrity, and a strong passion for offensive security and continuous technical learning.

Benefits:

• Competitive compensation ranging from $75,000 to $150,000 USD, depending on location and experience level.

• Performance-based incentives.

• Remote work flexibility with the option to work from an office when appropriate.

• Opportunity to work with an established leader in the cybersecurity industry.

• Access to highly experienced technical teams and advanced security research.

• Exposure to sophisticated Red Team, Purple Team, penetration testing, and adversarial security engagements.

• Opportunities to work with international clients and travel globally.

• A collaborative, high-energy environment that encourages technical innovation and creativity.

• Opportunities to contribute to cybersecurity research, presentations, whitepapers, and industry thought leadership.

• Meaningful work focused on improving the security posture and resilience of organizations facing evolving cyber threats.