Senior Consultant, Red Team Operator, Offensive Security

Location: Remote in Canada

Salary: CAD $110,000–$140,000 per year

Company

hirify.global provides risk and financial advisory solutions, combining investigative expertise with technology to help clients manage complex business risks.

What you will do

• Deliver red team, purple team, assumed-breach, and adversary emulation engagements across multiple sectors.
• Plan threat-informed scenarios, attack objectives, rules of engagement, operational security considerations, and success criteria.
• Execute authorised offensive activity across enterprise networks, Active Directory, Microsoft Entra ID, Microsoft 365, cloud platforms, endpoints, and externally exposed services.
• Build and operate red team infrastructure, command-and-control tooling, payloads, and scripts while applying detection-aware tradecraft.
• Conduct authorised social engineering, support purple team validation, and improve client prevention, detection, and response capabilities.
• Produce evidence-based reports, present technical findings and business risk, mentor junior consultants, and collaborate with incident response, threat intelligence, cloud security, and detection engineering teams.

Requirements

• 5+ years of offensive cybersecurity experience, including red team, purple team, adversary emulation, or assumed-breach engagements.
• Strong experience with Windows enterprise environments, Active Directory exploitation, privilege escalation, and lateral movement.
• Experience performing social engineering, including email and voice phishing.
• Experience operating command-and-control frameworks such as Mythic, Cobalt Strike, or similar tools in authorised client engagements.
• Experience developing, modifying, or extending offensive security tooling, scripts, or payloads.
• Working knowledge of at least one of C, C#, Python, PowerShell, and/or JavaScript.
• Practical understanding of evasion techniques, endpoint security controls, operational security, and detection-aware tradecraft.
• Strong understanding of networking and web protocols, including TCP/IP, DNS, HTTP, HTTPS, and authentication flows.
• Experience with reconnaissance, attack path development, and objective-based testing, plus clear written and verbal communication and the ability to manage risk within agreed rules of engagement.

Nice to have

• OSEP, OSCE3, CRTO, CRTL, GPEN, GXPN, or equivalent experience.
• Threat intelligence-driven red team experience and knowledge of Microsoft Entra ID, Microsoft 365, hybrid identity, AWS, Azure, or GCP attack paths.
• Experience with exploit development, reverse engineering, malware analysis, assembly-level debugging, macOS or Linux endpoint tradecraft, Kubernetes, Docker, CI/CD, DevOps, or containerised workloads.
• Experience with physical security, modern AI tooling, threat intelligence, detection engineering, incident response, research, industry presentations, offensive security tooling, or leading small teams and technical workstreams.

Culture & Benefits

• Collaborative, supportive environment focused on diverse backgrounds, global perspectives, and knowledge sharing.
• Benefits may vary by region, department, and role.
• U.S.-specific benefits described by the recruiter include medical, dental and vision coverage, paid time off, company holidays, parental and family leave, insurance protections, performance incentives, merit reviews, and 401(k) matching.

Hiring process

• Apply formally through careers.hirify.global.com to be considered.