Offensive Security Consultant – Red Team & Adversary Simulation

About the role

Protiviti's Attack & Penetration team is growing and is looking for an offensive security professional to run red team, purple team and threat-led penetration testing engagements that emulate real-world threat actors. The role covers on-premises, cloud, identity and SaaS environments, including AI/LLM-powered applications and agentic workflows. It is advertised in Indianapolis, with additional locations in Cincinnati, Columbus and Minneapolis.

Key responsibilities

• Lead engagements from scoping through executive readout, and coach and develop teammates
• Run red team, purple team and threat-led penetration testing engagements
• Test AI/LLM-powered applications, agentic workflows and identity platforms
• Use and build AI-assisted tooling and automation
• Design novel attacks, develop new tooling and contribute to a lab of testing tools
• Work with defenders to turn findings into better detections and faster response

Required profile

• Bachelor's degree in a relevant discipline or equivalent hands-on experience
• 5+ years of hands-on offensive security experience (red teaming, penetration testing or adversary simulation) in consulting or in-house
• Strong written and verbal communication, able to explain technical risk to executives
• Comfortable owning work end to end, from scoping to reporting and readout

Required skills

• Red and purple teaming with a strong command of TTPs and MITRE ATT&CK
• Attacking Active Directory, cloud and identity platforms (AWS, Azure, GCP, Entra ID, Okta) and CI/CD pipelines
• C2 frameworks (Mythic, Sliver, Cobalt Strike) and custom tooling in C#, Go, Rust, Python or PowerShell
• OpSec and evasion of EDR; exploit development or reverse engineering a plus
• Network and application penetration testing, including web, API and mobile apps (OWASP Top 10, Burp Suite)
• AI/LLM security knowledge (prompt injection, data leakage, tool abuse)
• OSCP, OSEP, OSWE, OSED, CRTO/CRTL, GXPN, GPEN, BSCP or comparable SANS 600/700-level coursework a plus

What we offer

• Hybrid workplace with in-person and remote work, and travel to client sites
• Salary range of $121,000 - $192,000, with a 12% bonus target
• Medical, dental and vision coverage, FSA/HSA accounts, life and accident insurance, adoption and fertility assistance, and paid parental leave up to 10 weeks
• Support to present at security conferences and to build new services