Red Team Principal Consultant
- Compensation
- Not disclosed
- Location
- US
- Work setup
- Remote
- Seniority
- Principal
- Employment
- Full time
- Experience
- 1+ years
- Category
- Security
- Posted
Skills
Must have
- At least 5 years of professional experience in Red Team operations, penetration testing, vulnerability assessments, or adversary emulation, strongly preferred.
- At least 1 year of experience in a technical leadership or team management role, preferably within cybersecurity consulting or security assessment environments.
- Advanced hands-on experience with security assessment and penetration testing tools such as Metasploit, Nmap, Cobalt Strike, Nessus, and Burp Suite.
- Comprehensive understanding of cybersecurity methodologies, security technologies, industry standards, and defensive best practices.
- Strong technical knowledge of Windows, Linux, UNIX, and macOS operating systems.
- Advanced understanding of networking infrastructure and components, including routers, switches, load balancers, and wireless access points.
- In-depth knowledge of firewalls, proxy servers, mail servers, web servers, and enterprise network architectures.
- Extensive experience providing operational support for operating systems, applications, and network environments.
- Proven expertise in Red Team operations, vulnerability assessments, penetration testing, and adversary emulation exercises.
- Strong experience with automation and scripting for applications, systems, and security testing workflows.
- Proven experience using AI technologies to enhance decision-making, streamline workflows and processes, improve efficiency, and drive business outcomes.
- Excellent communication and presentation skills, with the ability to explain complex technical concepts and security findings to both technical and non-technical audiences.
- Strong leadership, organizational, and project management capabilities, including the ability to coordinate multiple engagements and guide technical teams.
- Ability to work independently, exercise sound judgment, and deliver high-quality results in a dynamic consulting environment.
- Active participation in the cybersecurity community is highly desirable, including speaking at industry conferences, contributing to open-source security tools, or supporting security research initiat
- Relevant professional certifications are desirable, including OSCP, GPEN, OSCE, GCIH, or GXPN.
- Willingness and ability to travel occasionally, with travel expected to remain below 25%.
Full description
This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Red Team Principal Consultant based in the United States.
As a Red Team Principal Consultant, you will lead specialized cybersecurity teams in conducting advanced adversary simulations and penetration testing engagements. Your mission will be to help organizations evaluate their security posture by simulating real-world threat actors and identifying potential vulnerabilities across their IT environments. You will oversee complex security assessments, coordinate engagement strategies, and translate technical findings into actionable recommendations for both executive and technical stakeholders. Working closely with senior leadership and cybersecurity specialists, you will help strengthen defensive capabilities and improve organizational resilience against sophisticated cyber threats. You will also play a key role in mentoring consultants, developing team expertise, and advancing security assessment methodologies. This position combines technical leadership, hands-on security expertise, strategic consulting, and project management within a collaborative, remote-first environment.
Accountabilities:
- Lead and coordinate Red Team engagements, penetration testing projects, and adversary simulation activities designed to evaluate customer security defenses.
- Manage assessment activities that simulate known threat actors and analyze their potential to achieve objectives across the Cyber Kill Chain and MITRE ATT&CK Framework.
- Serve as a primary point of contact for Red Team engagements, coordinating project scope, resources, timelines, and execution strategies.
- Oversee penetration testing assessments across operating systems, applications, databases, and network infrastructure to identify security weaknesses and potential attack paths.
- Participate in hands-on security assessments while managing multiple penetration testing engagements and different types of consulting assignments.
- Develop comprehensive assessment reports, translating technical findings into clear insights, risk assessments, and actionable mitigation strategies for both executive and technical audiences.
- Communicate assessment results, recommendations, and project progress effectively to senior leadership, technical teams, and other relevant stakeholders.
- Collaborate with cybersecurity and professional services teams to improve customers' information security programs, defensive capabilities, and security resources.
- Provide specialized technical guidance during enterprise-wide crisis situations, including major production service disruptions and incidents requiring support outside standard change management processes.