Offensive Security Consultant – Red Team & Adversary Simulation (AI)

Location: Hybrid work from local hirify.global offices and client sites in Dallas, Atlanta, Chicago, Fort Lauderdale, Houston, Miami, or Tampa, United States. Local and out-of-state travel may be required. hirify.global is not registered to hire personnel in West Virginia or Alaska.

Salary: $129,000–$205,000 annual base salary, with a 12% bonus target and estimated total cash of $144,480–$229,600.

Company

hirify.global is a global consulting firm providing security and business advisory services across industries.

What you will do

• Plan and execute red team, purple team, and threat-led penetration testing engagements that emulate real-world threat actors.
• Assess on-premises, cloud, identity, SaaS, CI/CD, web, API, mobile, and AI/LLM-enabled environments.
• Build AI-assisted tooling, automation, custom attack tools, and novel attack techniques.
• Develop and maintain testing tools and lab infrastructure for adversary simulation scenarios.
• Work with SOC and detection engineering teams to improve detections, response, and measurable security outcomes.
• Lead engagements from scoping through reporting and executive readout while coaching teammates and developing client relationships.

Requirements

• 5+ years of hands-on offensive security experience in red teaming, penetration testing, or adversary simulation.
• Experience with real-world adversary emulation, TTPs, MITRE ATT&CK, threat intelligence-driven scenarios, and ransomware simulations.
• Hands-on experience attacking Active Directory, AWS, Azure, GCP, Entra ID, Okta, and CI/CD pipelines.
• Proficiency with C2 frameworks such as Mythic, Sliver, or Cobalt Strike, and custom tooling in C#, Go, Rust, Python, or PowerShell.
• Experience with network, web application, API, and mobile penetration testing, vulnerability exploitation, privilege escalation, OWASP Top 10, and Burp Suite.
• Bachelor’s degree in a relevant discipline or equivalent hands-on experience, with strong client-facing written and verbal communication skills.

Nice to have

• Experience with DORA TLPT, TIBER-EU, or CBEST.
• Exploit development, reverse engineering, or EDR evasion experience.
• Knowledge of LLM attacks such as prompt injection, data leakage, and tool abuse.
• Security certifications including OSCP, OSEP, OSWE, OSED, CRTO/CRTL, GXPN, GPEN, BSCP, or relevant cloud security certifications.
• Research publications, tool releases, blogs, or conference participation.

Culture & Benefits

• Hybrid work combining purposeful in-person collaboration with remote work; requirements vary by client, project, team, and business needs.
• Opportunities to research new techniques, develop tooling, create services, and present at security conferences.
• Medical, dental, and vision coverage, plus FSA and HSA accounts.
• Paid parental leave, disability coverage, life and accident insurance, and adoption and fertility assistance.
• 401(k) plan with employer matching, up to 20 days of Choice Time Off for new hires, and up to 11 paid holidays.

Hiring process

• Employment offers are contingent on successful completion of a background check.