Offensive Security Consultant – Red Team & Adversary Simulation

JOB REQUISITION

LOCATION

ADDITIONAL LOCATION(S)

JOB DESCRIPTION

You Belong Here

The Protiviti Career provides opportunity to learn inspire and advance within a collaborative and inclusive culture. We hire curious individuals for whom learning is a passion. We lean into our mission: We Care. We Collaborate. We Deliver.

At every level we champion leaders who live our values of integrity inclusion innovation and commitment to success. Imagining our work as a journey we believe integrity guides our way inclusion moves us forward together innovation creates new destinations and our commitment to success empowers us to deliver on our vision to be the most trusted global consulting firm.

Where We Need You

Protivitis Attack & Penetration team is growing and were looking for an offensive security professional who wants to do real adversary worknot checkbox testing. Youll join a team that runs red team purple team and threat-led engagements for organizations across nearly every industry and youll have the tools lab and backing to push the craft forward.

What You Can Expect

Youll be both a trusted advisor and a hands-on operator. Youll lead engagements from scoping through executive readout build lasting relationships with client security teams and help them understand not just whats broken but how a real attacker would exploit it and what to fix first. Youll also coach and develop teammatessharing what you know and learning from them in return.

• Plan and execute red team purple team and threat-led penetration testing (TLPT) engagements that emulate real-world threat actors across on-prem cloud identity and SaaS environments.

• Test the newest attack surface including AI/LLM-powered applications agentic workflows and the identity platforms that connect them.

• Use and build AI-assisted tooling and automation to move faster and go deeper during operations.

• Develop new tooling design novel attacks and contribute to a robust lab of testing tools and equipment built to tackle hundreds of adversary simulation scenarios.

• Partner with defenders to turn findings into better detections faster response and measurable improvement.

• Help shape the future of the practiceif you have an idea for a new service and theres demand for it well help you build it.

Why Youll Want to Join

• Real-world impact: Your work directly shapes how clients defend against the threats theyre facing today.

• Room to build: Support to develop tooling research new techniques and turn ideas into new services.

• Industry visibility: We encourage and support presenting at local national and international security conferences.

• Variety: Engagements across industries technologies and environmentsno two operations look the same.

• Growth: Work alongside experienced operators mentor others and grow your career within a global firm.

• Flexibility: A hybrid model that balances purposeful in-person time with remote work.

What Will Help You Be Successful

• You love offensive security and get energized by finding the path an attacker would take.

• You stay current on the threat landscapenew TTPs tooling vulnerabilities and how AI is changing both attack and defense.

• You thrive on the puzzle of targeting an organization chaining weaknesses together and evading defensive controls.

• You enjoy sharing what you knowcoaching teammates on engagements building training or debating the latest technique.

• You care about the client outcome and can translate technical risk into business impact that resonates with security teams and executives alike.

• Youre comfortable owning work end to endscoping execution reporting and readout.

• Youre curious about your clients businesses and how security risk shows up in their industries.

Do Your Talents Include the Following

Technical Skills and Talents

Red & Purple Teaming

• Experience running red team engagements that emulate real-world threat actors with a strong command of TTPs and MITRE ATT&CK.

• Ability to partner with SOC and detection engineering teams to improve detection and response.

• Experience designing threat inteldriven scenarios including ransomware simulations. Familiarity with DORA TLPT TIBER-EU or CBEST is a plus.

Tradecraft & Tooling

• Hands-on experience attacking Active Directory cloud and identity platforms (AWS Azure GCP Entra ID Okta) and CI/CD pipelines.

• Proficiency with C2 frameworks (e.g. Mythic Sliver Cobalt Strike) and building custom tooling in languages like C# Go Rust Python or PowerShell.

• Strong OpSec and experience evading EDR and other monitoring tools. Exploit development or reverse engineering skills are a plus.

Network & Application Penetration Testing

• Experience performing internal and external network penetration tests including vulnerability discovery exploitation and privilege escalation.

• Experience testing web applications APIs and mobile apps with a solid grasp of the OWASP Top 10 and tools like Burp Suite.

• Ability to look past scanner output validate findings manually and chain issues into real attack paths.

AI & LLM Security

• Understanding of attacks against LLM-enabled apps and agents (e.g. prompt injection data leakage tool abuse) and interest in using AI to speed up offensive work.

Soft Skills

• Ability to turn technical findings into clear actionable reports and conversations for both technical teams and executives.

• Creative problem solvingfinding a way forward when the obvious path is blocked.

• A track record of research tool releases blogs or conference involvement (e.g. Black Hat DEF CON BSides) is a plus.

Your Educational and Professional Qualifications

• Bachelors degree in a relevant discipline (e.g. CS CE IS MIS EE) or equivalent hands-on experience.

• 5 years of hands-on offensive security experiencered teaming penetration testing or adversary simulationin consulting or in-house.

• Strong written and verbal communication skills including producing clear client-ready reports and presentations.

• Certifications such as OSCP OSEP OSWE OSED CRTO/CRTL GXPN GPEN BSCP or comparable SANS 600/700-level coursework are a plus.

• Cloud security certifications (e.g. AWS Certified Security Specialty Microsoft AZ-500 Google Professional Cloud Security Engineer CCSK) are a plus.

Our Hybrid Workplace

Protiviti practices a hybrid model which is a combination of working in person with a purpose and working remotely. This model creates meaningful experiences for our people and our clients while offering a flexible environment. The ratio of remote to in-person requirements vary by client project team and other business factors. Our people work both in-person in local Protiviti offices and on client sites which can include local or out-of-state travel based on our projects and client requests and commitments.

Protiviti is not registered to hire or employ personnel in the following states West Virginia Alaska.

Starting salary is based on a full-time equivalent schedule. Placement in the range is dependent upon experience skills and geographic work location. Below is the salary range for this job.

Our annual bonus plan provides eligible employees additional cash and/or discretionary stock compensation opportunities. Below is the bonus target opportunity for this job.

The total cash range is estimated from the sum of the base salary range plus the bonus target opportunity. Below is the estimated total cash range for this job.

Employees are eligible for medical dental and vision coverages FSA and HSA healthcare accounts life and accident insurance adoption and fertility assistance paid parental leave up to 10 weeks and short/long term disability. We offer eligible employees a company 401(k) savings and investment plan with an employer match of 50% on the first 6% of your contributions. We provide Choice Time Off (CTO) for vacation personal needs and sick time. The amount of (CTO) varies based on years of service. New hires receive up to 20 days of CTO per calendar year. Protiviti also recognizes up to 11 paid holidays each calendar year.

Learn more about the variety of rewards we offer at Protiviti at benefits outlined are part of our reward offerings for full-time employees in the U.S. Your Open Enrollment materials insurance contracts plan documents and Summary Plan Descriptions together comprise the official plan document which legally governs the administration of your benefit plans. Protiviti reserves the right to terminate or amend your benefit plans in any way and at any time.

Protiviti is an Equal Opportunity Employer. M/F/Disability/Veteran

As part of Protivitis employment process any offer of employment is contingent upon successful completion of a background check.

Protiviti is committed to being an equal employment employer offering opportunities to all job seekers including individuals with disabilities. If you believe you need a reasonable accommodation in order to search for a job opening or to apply for a position please contact us by sending an email to or call 1.855.744.6947 for assistance.

In your email please include the following:

• The specific accommodation requested to complete the employment application.

• The location(s) (city state) to which you would like to apply.

For positions located in San Francisco CA: Protiviti will consider qualified applicants with criminal histories in a manner consistent with the requirements of the San Francisco Fair Chance Ordinance.

For positions located in Los Angeles County CA: Protiviti will consider for employment qualified applicants with arrest or conviction records in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act.

Protiviti is not registered to hire or employ personnel in the following states West Virginia Alaska.

Protiviti is not licensed or registered as a public accounting firm and does not issue opinions on financial statements or offer attestation services.

JOBLOCATION