Offensive Security Consultant – Red Team, Adversary Simulation

Protiviti

. Plan and execute red team, purple team, and threat-led penetration testing engagements emulating real-world threat actors .

Posted 10/9/2026full-timeUnited StatesMid-LevelSenior💰 $129,000 - $205,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive experience in offensive security, including red teaming and penetration testing, with a strong command of TTPs and MITRE ATT&CK. Proficient in developing custom tooling and conducting threat intelligence-driven scenarios while effectively communicating findings to clients.

Highest-signal resume keywords

Red Team EngagementsPenetration TestingMITRE ATT&CKC2 FrameworksCloud Security

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Offensive SecurityThreat IntelligenceActive Directory AttacksVulnerability DiscoveryExploitationPrivilege EscalationWeb Application TestingAPI TestingMobile Application TestingCustom Tooling Development

Soft Skills

Communication SkillsCoachingRelationship Building

Tools & Technologies

MythicSliverCobalt StrikeBurp SuiteAWSAzureGCPEntra IDOktaCI/CD Pipelines

Certifications & Qualifications

OSCPOSEPOSWEOSEDCRTOCRTLGXPNGPENBSCP

Industry Keywords

Red TeamingAdversary SimulationOperational SecurityEDR EvadingOWASP Top 10DORA TLPTTIBER-EUCBEST

Tech Stack

Tools & technologies

AWSAzureCloudGoogle Cloud PlatformPythonRustGo

About the role

Key responsibilities & impact

Plan and execute red team, purple team, and threat-led penetration testing engagements emulating real-world threat actors
Lead engagements from scoping through executive readout
Build relationships with client security teams and explain attack paths, remediation priorities, and business impact
Test attack surfaces across on-premises, cloud, identity, SaaS, AI/LLM-powered applications, and agentic workflows
Use and build AI-assisted tooling and automation during operations
Develop new tooling and design novel attacks
Contribute to a lab of testing tools and equipment for adversary simulation scenarios
Partner with defenders to improve detections, response, and measurable security outcomes
Coach and develop teammates, build training, and share offensive security knowledge
Help shape new services and contribute to the growth of the offensive security practice
Work with clients across industries, technologies, and environments
Work in person at local Protiviti offices and on client sites, with possible local or out-of-state travel based on projects and client requests

Requirements

What you’ll need

Bachelor's degree in a relevant discipline (e.g., CS, CE, IS, MIS, EE) or equivalent hands-on experience
5+ years of hands-on offensive security experience in red teaming, penetration testing, or adversary simulation, in consulting or in-house
Experience running red team engagements that emulate real-world threat actors, with strong command of TTPs and MITRE ATT&CK
Ability to partner with SOC and detection engineering teams to improve detection and response
Experience designing threat intelligence–driven scenarios, including ransomware simulations
Hands-on experience attacking Active Directory, cloud and identity platforms (AWS, Azure, GCP, Entra ID, Okta), and CI/CD pipelines
Proficiency with C2 frameworks such as Mythic, Sliver, and Cobalt Strike
Experience building custom tooling in C#, Go, Rust, Python, or PowerShell
Strong operational security (OpSec) and experience evading EDR and other monitoring tools
Experience performing internal and external network penetration tests, including vulnerability discovery, exploitation, and privilege escalation
Experience testing web applications, APIs, and mobile apps; solid grasp of the OWASP Top 10 and tools such as Burp Suite
Ability to validate findings manually and chain issues into real attack paths
Understanding of attacks against LLM-enabled applications and agents, including prompt injection, data leakage, and tool abuse
Strong written and verbal communication skills, including clear, client-ready reports and presentations
Background check required upon offer
Certifications such as OSCP, OSEP, OSWE, OSED, CRTO/CRTL, GXPN, GPEN, BSCP, or comparable SANS 600/700-level coursework are a plus
Cloud security certifications are a plus
Familiarity with DORA TLPT, TIBER-EU, or CBEST is a plus
Exploit development or reverse engineering skills are a plus
Research, tool releases, blogs, or conference involvement is a plus

Benefits

Comp & perks

Annual bonus plan with 12% bonus target opportunity and/or discretionary stock compensation opportunities
Medical, dental, and vision coverages
FSA and HSA healthcare accounts
Life and accident insurance
Adoption and fertility assistance
Paid parental leave up to 10 weeks
Short-term and long-term disability
401(k) savings and investment plan with an employer match of 50% on the first 6% of contributions
Choice Time Off (CTO) for vacation, personal needs, and sick time; new hires receive up to 20 days per calendar year
Up to 11 paid holidays each calendar year
Hybrid work model with remote work and purposeful in-person time
Support to develop tooling, research new techniques, and turn ideas into new services
Support for presenting at local, national, and international security conferences
Coaching, mentoring, and career growth opportunities