Offensive Security Consultant – Red Team & Adversary Simulation

Location: New York City or McLean, Virginia; hybrid work with in-person office and client-site work, including local or out-of-state travel

Salary: $138,000–$219,000 base annually; estimated total cash range of $154,560–$245,280 including a 12% bonus target

Company

hirify.global is a global consulting firm providing cybersecurity and business advisory services across multiple industries.

What you will do

• Plan and execute red team, purple team, and threat-led penetration testing engagements that emulate real-world threat actors.
• Assess on-premises, cloud, identity, SaaS, CI/CD, web application, API, mobile, and AI/LLM-enabled environments.
• Develop custom offensive tooling, novel attack techniques, automation, and AI-assisted operational workflows.
• Lead engagements from scoping through technical reporting and executive readouts.
• Partner with SOC and detection engineering teams to improve detection, response, and measurable security outcomes.
• Coach teammates, contribute to the testing lab, and help develop new cybersecurity services.

Requirements

• At least 5 years of hands-on offensive security experience in red teaming, penetration testing, or adversary simulation.
• Experience with real-world adversary emulation, TTPs, MITRE ATT&CK, Active Directory, cloud and identity platforms, and CI/CD pipelines.
• Proficiency with C2 frameworks such as Mythic, Sliver, or Cobalt Strike and programming or scripting in C#, Go, Rust, Python, or PowerShell.
• Experience with network, web application, API, and mobile penetration testing, vulnerability exploitation, privilege escalation, and attack-path analysis.
• Understanding of LLM and agent attacks, including prompt injection, data leakage, and tool abuse.
• Bachelor’s degree in a relevant discipline or equivalent hands-on experience, plus strong written and verbal communication skills.

Nice to have

• Experience with DORA TLPT, TIBER-EU, CBEST, exploit development, or reverse engineering.
• Research publications, tool releases, technical blogs, or conference participation.
• Certifications such as OSCP, OSEP, OSWE, OSED, CRTO/CRTL, GXPN, GPEN, BSCP, or comparable SANS coursework.
• Cloud security certifications such as AWS Certified Security – Specialty, Microsoft AZ-500, Google Professional Cloud Security Engineer, or CCSK.

Culture & Benefits

• Hybrid work combining purposeful in-person collaboration with remote work; requirements vary by client, project, team, and business needs.
• Medical, dental, and vision coverage, with FSA and HSA healthcare accounts.
• Life and accident insurance, disability coverage, adoption and fertility assistance, and up to 10 weeks of paid parental leave.
• Up to 20 days of Choice Time Off for new hires, plus up to 11 paid holidays annually.
• 401(k) plan with an employer match of 50% on the first 6% of employee contributions.
• Support for research, tooling, service development, and participation in security conferences.

Hiring process

• Employment offers are contingent on successfully completing a background check.