Offensive Security Consultant / Penetration Tester

Accountabilities: You will lead hands-on offensive security engagements, combining advanced technical testing with a consultative approach to help clients understand, prioritize, and remediate security risks. Conduct manual penetration tests across network infrastructure, web applications, APIs, cloud environments, wireless systems, thick clients, and enterprise networks. Lead objective-based red team exercises and adversary simulation engagements when included in the project scope. Identify and exploit security vulnerabilities by developing realistic attack paths and chaining findings to demonstrate their potential impact. Create custom proof-of-concept exploits, scripts, tools, and offensive techniques when existing solutions are insufficient. Prepare comprehensive security assessment reports featuring attack narratives, technical evidence, business impact, and prioritized remediation recommendations. Participate in project kickoff meetings, technical discussions, and final report presentations. Support clients throughout remediation by answering technical questions, validating security fixes, and explaining identified risks and their implications. Contribute to internal methodologies, offensive security tooling, laboratory environments, and technical research. Share knowledge and mentor colleagues through sound technical judgment, professional communication, and high-quality execution. Translate complex technical findings into practical security improvements that align with client environments and operational constraints. Requirements The ideal candidate combines substantial hands-on offensive security experience with strong consulting skills, technical curiosity, and the ability to communicate effectively with both technical and executive stakeholders. At least 5 years of practical experience in penetration testing, offensive security consulting, or red team operations. Advanced expertise in at least one major security domain, such as network penetration testing, Active Directory, web application and API security, cloud security, or red teaming. Relevant industry certifications or equivalent demonstrable practical expertise in offensive security. Proficiency with widely used penetration testing tools, security assessment frameworks, and command-and-control (C2) platforms. Scripting or programming skills to support automation, custom tooling, vulnerability exploitation, and proof-of-concept development. Working knowledge of established offensive security methodologies and references, including PTES, OWASP, and MITRE ATT&CK. Strong client-facing communication skills, with the ability to explain technical vulnerabilities to system administrators and communicate business risks to executive stakeholders. Ability to work independently, exercise sound technical judgment, and deliver high-quality engagements with minimal supervision. Strong analytical thinking, curiosity, humility, and a practical, solution-oriented mindset. Ability to understand client environments and operational constraints before recommending remediation strategies. Additional experience that would be an advantage: Previous experience delivering penetration testing engagements in a professional consulting environment. Experience assessing cloud infrastructure, identity systems, EDR-protected endpoints, or complex enterprise networks. Ability to connect offensive security findings with compliance requirements, business risks, and remediation priorities. Experience with malware development, C2 framework enhancements, or endpoint detection and response (EDR) evasion techniques. Interest in contributing to cybersecurity blogs, technical publications, or industry conferences. Benefits Competitive contract compensation starting at $70 per hour, with market-rate potential. Contract engagement initially lasting 3 months or longer. Fully remote, remote-first working environment within the United States. Potential for uncapped quarterly performance bonuses. Paid professional training and industry certifications. Opportunities to attend cybersecurity conferences and industry events. Collaboration with experienced offensive security professionals. Opportunities to contribute to technical research, custom tooling, and security methodology development. High-trust, collaborative, and low-ego working culture that encourages knowledge sharing and continuous improvement. Significant technical autonomy and opportunities to deepen expertise through challenging client engagements.