Cyber Offensive Security Senior Associate (AI Red Teaming)

Location: Hybrid in Philadelphia, New York, Boston, Arlington, Charlotte, Chicago, Atlanta, Houston, Dallas, or Austin, United States; in-person attendance at least three days per week at a hirify.global office or client site.

Company

hirify.global provides audit, tax, advisory, and other professional services through a multinational platform with more than 50 offices and 12,000 professionals.

What you will do

• Lead client adversarial testing engagements across network, application, API, cloud, and internal infrastructure environments.
• Plan and execute penetration tests from scoping and exploitation through post-exploitation and reporting.
• Design threat-informed adversary emulations and assume-breach engagements to validate detection, response, containment, and security-control effectiveness.
• Perform AI/ML and LLM application security testing, including prompt injection, model manipulation, data exfiltration, and abuse-case testing.
• Map threat-actor tactics, techniques, and procedures to MITRE ATT&CK and other relevant frameworks; produce prioritized remediation guidance and present findings to technical and executive audiences.
• Contribute to methodologies, tooling, automation, client advisory, and mentoring of junior team members.

Requirements

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field.
• At least 3 years of hands-on experience in offensive security, penetration testing, or red teaming.
• Demonstrated expertise across multiple testing domains, including network, application, cloud, and/or internal infrastructure testing.
• Strong understanding of adversary TTPs and frameworks such as MITRE ATT&CK, ATLAS, and OWASP.
• Proficiency with industry-standard security tooling and command-and-control frameworks.
• Scripting and automation skills using Python, PowerShell, Bash, or comparable tools.
• Experience conducting assume-breach or adversary emulation engagements.
• Excellent written and verbal communication skills, including producing professional, client-ready reports.
• Ability to work independently, manage multiple engagements, and meet deadlines in a client-service environment.

Nice to have

• Certifications such as OSCP, OSEP, OSWE, GPEN, GXPN, GWAPT, or CREST.
• Prior consulting or professional-services experience.
• Cloud security testing experience across AWS, Azure, and/or GCP.
• Experience with AI/ML or LLM security testing and adversarial techniques.
• Familiarity with breach and attack simulation platforms.
• Experience testing D365 and integrations.
• Security-community contributions through research, tooling, CVEs, conference talks, or publications.

Culture & Benefits

• Hybrid work model with flexibility in work location, weekly schedule, and flex time off, subject to client needs.
• Work-life integration options and personalized comprehensive benefits.
• Medical, dental, and vision insurance, employee assistance programs, paid sick leave, and applicable retirement-plan benefits.
• Employees may be eligible for a discretionary annual bonus based on individual and firm performance.
• Commitment to diversity, equity, inclusion, and reasonable workplace accommodations.

Hiring process

• Selected applicants are contacted by a hirify.global team member to schedule an interview.