Senior Consultant, Red Team Operator, Offensive Security (Cybersecurity)

Location: Remote, United States

Salary: $110,000–$150,000 USD annually

Company

hirify.global provides investigative, risk, financial, and cybersecurity services that help clients understand and address complex business and security challenges.

What you will do

• Deliver red team, purple team, assumed-breach, and adversary emulation engagements for clients across multiple sectors.
• Plan threat-informed scenarios, define attack objectives and rules of engagement, and execute authorised offensive activity across enterprise networks, identity platforms, Microsoft 365, cloud environments, endpoints, and external services.
• Conduct Active Directory exploitation, credential access, privilege escalation, lateral movement, objective-based testing, reconnaissance, and authorised social engineering.
• Build and operate red team infrastructure, command-and-control tooling, payloads, and scripts while applying detection-aware tradecraft.
• Validate detection logic with client security teams and provide evidence-based reporting on attack paths, business impact, response observations, and prioritised remediation.
• Present findings, mentor junior consultants, support quality assurance, and collaborate with incident response, threat intelligence, cloud security, and detection engineering teams.

Requirements

• 5+ years of offensive cybersecurity experience, including delivery of red team, purple team, adversary emulation, or assumed-breach engagements.
• Strong experience with Windows enterprise environments, Active Directory exploitation, privilege escalation, and lateral movement.
• Experience performing social engineering, including email and voice phishing, in support of red team operations.
• Experience operating command-and-control frameworks such as Mythic, Cobalt Strike, or similar authorised tooling.
• Experience developing, modifying, or extending offensive security tooling, scripts, or payloads.
• Working knowledge of at least one of C, C#, Python, PowerShell, and/or JavaScript.
• Practical understanding of evasion techniques, endpoint security controls, operational security, and detection-aware tradecraft.
• Strong understanding of networking and web protocols, including TCP/IP, DNS, HTTP, HTTPS, and authentication flows.
• Experience with reconnaissance, attack-path development, objective-based testing, risk management during live client engagements, and working within agreed rules of engagement.
• Excellent written and verbal communication skills, including the ability to explain complex technical issues to technical and non-technical audiences.

Nice to have

• OSEP, OSCE3, CRTO, CRTL, GPEN, GXPN, or equivalent experience.
• Threat intelligence-driven red team experience and knowledge of Microsoft Entra ID, Microsoft 365, hybrid identity, AWS, Azure, or GCP attack paths.
• Experience with exploit development, reverse engineering, malware analysis, assembly-level debugging, macOS or Linux endpoint tradecraft, Kubernetes, Docker, CI/CD, DevOps, or containerised workloads.
• Physical security experience, modern AI tooling for offensive engagements, threat intelligence, detection engineering, or incident response experience.
• Experience writing blogs, presenting at industry events, publishing research, contributing to offensive security tooling, or leading small teams and technical workstreams.

Culture & Benefits

• Remote role for candidates in the United States.
• Collaborative work across hirify.global’s Cyber Risk, incident response, threat intelligence, cloud security, and detection engineering teams.
• Inclusive work environment and equal opportunity employment.

Hiring process

• Formal application through careers.hirify.global.com is required for consideration.