Associate Principal Red Team Consultant

{
  "content_hash": "2f2e4d984a296791af0a1bae99321156a003b2f75a9d5fd9db73289ee0e3b6c2",
  "source_hash": "b18a33203f443b1c032532585acd39c092e56248a80cb3f660e27ed7186c3e3b",
  "last_changed_at": "2026-06-19T07:56:49.155Z",
  "active_status": "active"
}

{
  "dedupe": null,
  "language": "en",
  "location": {
    "raw": "Remote",
    "city": null,
    "region": null,
    "country": "United States",
    "is_remote": true,
    "confidence": 0.9
  },
  "salary_max": 195000,
  "salary_min": 165000,
  "inferred_at": "2026-06-23T07:56:42.123Z",
  "launch_scope": {
    "reason": "english_us_canada",
    "included": true,
    "language": "en",
    "location": {
      "raw": "Remote",
      "city": null,
      "region": null,
      "country": "United States",
      "is_remote": true,
      "confidence": 0.9
    },
    "countries": [
      "United States"
    ]
  },
  "remote_policy": "remote",
  "salary_period": "year",
  "workplace_type": "remote",
  "salary_currency": "USD"
}

{}

{
  "lists": [
    {
      "text": "What You'll Do:",
      "content": "<div>- Lead and participate in full-lifecycle red team engagements: scoping, planning, execution, and reporting<br>- Simulate advanced persistent threat (APT) tactics against enterprise network and cloud environments<br>- Execute multi-stage attack chains spanning network compromise, Active Directory abuse, cloud environments, and data exfiltration<br>- Design and conduct social engineering campaigns including phishing, vishing, and smishing operations<br>- Conduct adversary simulation against hybrid and cloud-native environments (AWS, Azure, GCP)<br>- Develop custom tooling, payloads, and tradecraft to evade modern defensive controls (EDR, SIEM, CASB)<br>- Produce high-quality, actionable reports tailored to both technical and executive audiences<br>- Collaborate with blue team and MDR teams to deliver purple team assessments<br>- Mentor junior consultants and contribute to internal capability development<br>- Stay current with emerging threat actor TTPs, tooling, and industry research</div>"
    },
    {
      "text": "What You Have:",
      "content": "<div>\n<p>US Citizenship is Required</p>\n<p>Core Offensive Security<br>- 4+ years in offensive security, penetration testing, or red team roles<br>- Proven experience leading or independently executing full red team engagements (not just component pentests)<br>- Strong command of red teaming methodologies and attack patterns<br>- Proficiency with common red team toolkits: Cobalt Strike, Metasploit, Sliver, Havoc, or equivalent C2 frameworks<br>- Ability to develop and modify offensive tooling (Python, PowerShell, C/C#, or Go)</p>\n<p>Network &amp; Infrastructure<br>- Deep knowledge of Active Directory attack paths: Kerberoasting, AS-REP roasting, ACL abuse, DCSync, delegation attacks<br>- Experience with internal network lateral movement, credential access, and persistence mechanisms<br>- Familiarity with common enterprise security controls and bypass techniques (AV/EDR evasion, AMSI bypass, LOLBins)<br>- Understanding of network protocols: SMB, LDAP, Kerberos, DNS, RDP, WinRM</p>\n<p>Cloud Environments<br>- Hands-on experience attacking cloud infrastructure in at least one major provider (AWS, Azure, or GCP)<br>- Familiarity with cloud-specific attack paths<br>- Experience with cloud red team tooling</p>\n<p>Social Engineering<br>- Experience designing and executing phishing simulation campaigns (credential harvesting, malware delivery)<br>- Familiarity with pretexting, vishing, and physical access scenarios<br>- Understanding of awareness evasion techniques (email gateway bypass, domain aging, spoofing controls)</p>\n<p>Preferred Qualifications</p>\n<p>- Relevant certifications: OSCP, CRTO, CRTE, PNPT, CRTL, or equivalent<br>- Cloud security certifications (AWS Security Specialty, AZ-900+, or similar) a plus<br>- Prior consulting or professional services experience in a client-facing capacity<br>- Experience with TIBER-EU, CBEST, or other regulated red team frameworks<br>- Published research, CVEs, or conference presentations (DEF CON, Black Hat, etc.)<br>- Familiarity with threat intelligence and threat actor emulation planning</p>\n<p>Soft Skills &amp; Professional Requirements</p>\n<p>- Strong written and verbal communication — ability to write clear, concise, and technically accurate reports<br>- Comfortable presenting findings to C-suite and board-level stakeholders<br>- Self-directed; able to manage engagement workload with minimal supervision<br>- Collaborative team player with a mentorship mindset<br>- Ability to work within legal and ethical boundaries and maintain client confidentiality at all times<br>- Willingness to travel for on-site engagements as needed (up to ~25%)</p>\n</div>"
    }
  ],
  "country": "US",
  "createdAt": 1781803860667,
  "updatedAt": null,
  "categories": {
    "team": "Offensive Security",
    "location": "Remote",
    "department": "Commercial",
    "allLocations": [
      "Remote"
    ]
  },
  "salaryRange": {
    "max": 195000,
    "min": 165000,
    "currency": "USD",
    "interval": "per-year-salary"
  },
  "workplaceType": "remote"
}