Red Team Principal Consultant

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Red Team Principal Consultant based in the United States.

As a Red Team Principal Consultant, you will lead specialized cybersecurity teams in conducting advanced adversary simulations and penetration testing engagements. Your mission will be to help organizations evaluate their security posture by simulating real-world threat actors and identifying potential vulnerabilities across their IT environments. You will oversee complex security assessments, coordinate engagement strategies, and translate technical findings into actionable recommendations for both executive and technical stakeholders. Working closely with senior leadership and cybersecurity specialists, you will help strengthen defensive capabilities and improve organizational resilience against sophisticated cyber threats. You will also play a key role in mentoring consultants, developing team expertise, and advancing security assessment methodologies. This position combines technical leadership, hands-on security expertise, strategic consulting, and project management within a collaborative, remote-first environment.

Accountabilities:

- Lead and coordinate Red Team engagements, penetration testing projects, and adversary simulation activities designed to evaluate customer security defenses.

- Manage assessment activities that simulate known threat actors and analyze their potential to achieve objectives across the Cyber Kill Chain and MITRE ATT&CK Framework.

- Serve as a primary point of contact for Red Team engagements, coordinating project scope, resources, timelines, and execution strategies.

- Oversee penetration testing assessments across operating systems, applications, databases, and network infrastructure to identify security weaknesses and potential attack paths.

- Participate in hands-on security assessments while managing multiple penetration testing engagements and different types of consulting assignments.

- Develop comprehensive assessment reports, translating technical findings into clear insights, risk assessments, and actionable mitigation strategies for both executive and technical audiences.

- Communicate assessment results, recommendations, and project progress effectively to senior leadership, technical teams, and other relevant stakeholders.

- Collaborate with cybersecurity and professional services teams to improve customers' information security programs, defensive capabilities, and security resources.

- Provide specialized technical guidance during enterprise-wide crisis situations, including major production service disruptions and incidents requiring support outside standard change management processes.

- Mentor, support, and develop less experienced Red Team consultants, encouraging technical excellence, knowledge sharing, and continuous professional growth.

- Contribute to the continuous improvement of assessment methodologies, technical resources, and operational practices.

Requirements:

- At least 5 years of professional experience in Red Team operations, penetration testing, vulnerability assessments, or adversary emulation, strongly preferred.

- At least 1 year of experience in a technical leadership or team management role , preferably within cybersecurity consulting or security assessment environments.

- Advanced hands-on experience with security assessment and penetration testing tools such as Metasploit, Nmap, Cobalt Strike, Nessus, and Burp Suite.

- Comprehensive understanding of cybersecurity methodologies, security technologies, industry standards, and defensive best practices.

- Strong technical knowledge of Windows, Linux, UNIX, and macOS operating systems.

- Advanced understanding of networking infrastructure and components, including routers, switches, load balancers, and wireless access points.

- In-depth knowledge of firewalls, proxy servers, mail servers, web servers, and enterprise network architectures.

- Extensive experience providing operational support for operating systems, applications, and network environments.

- Proven expertise in Red Team operations, vulnerability assessments, penetration testing, and adversary emulation exercises.

- Strong experience with automation and scripting for applications, systems, and security testing workflows.

- Proven experience using AI technologies to enhance decision-making, streamline workflows and processes, improve efficiency, and drive business outcomes.

- Excellent communication and presentation skills, with the ability to explain complex technical concepts and security findings to both technical and non-technical audiences.

- Strong leadership, organizational, and project management capabilities, including the ability to coordinate multiple engagements and guide technical teams.

- Ability to work independently, exercise sound judgment, and deliver high-quality results in a dynamic consulting environment.

- Active participation in the cybersecurity community is highly desirable, including speaking at industry conferences, contributing to open-source security tools, or supporting security research initiatives.

- Relevant professional certifications are desirable, including OSCP, GPEN, OSCE, GCIH, or GXPN.

- Willingness and ability to travel occasionally, with travel expected to remain below 25% .

Benefits:

- Competitive compensation: Annual base salary ranging from $140,000 to $200,000 , depending on relevant experience, qualifications, skills, and location.

- Eligibility for additional performance-based bonuses and equity grants.

- Comprehensive healthcare coverage, including health insurance.

- Retirement savings benefits through a 401(k) plan.

- Competitive paid time off and vacation policies to support work-life balance.

- Paid parental and adoption leave.

- Comprehensive physical and mental wellness programs.

- Professional development and career advancement opportunities for employees at every level.

- Opportunities to expand technical expertise through continuous learning, cybersecurity training, and exposure to advanced security technologies.

- Employee resource networks, regional communities, and volunteering opportunities that encourage professional connections and collaboration.

- Flexible remote working arrangements within the United States.

- An inclusive, collaborative, and innovation-driven working environment that values employee autonomy, experimentation, and continuous improvement.

How Jobgether works:

We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.

We appreciate your interest and wish you the best!

Why Apply Through Jobgether?

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.

#LI-CL1