Offensive Security Consultant – Red Team & Adversary Simulation

About the role

Protiviti's Attack & Penetration team is growing and is looking for an offensive security professional to run red team, purple team and threat-led penetration testing engagements that emulate real-world threat actors. The role covers on-premises, cloud, identity and SaaS environments, including AI/LLM-powered applications and agentic workflows. It is advertised in Dallas, with additional locations listed.

Key responsibilities

• Lead engagements from scoping through executive readout, and coach and develop teammates
• Run red team, purple team and threat-led penetration testing engagements
• Test AI/LLM applications, agentic workflows and identity platforms
• Use and build AI-assisted tooling and automation
• Design novel attacks, build tooling and contribute to a lab of testing tools
• Work with defenders to turn findings into better detections and faster response

Required profile

• Bachelor's degree in a relevant discipline or equivalent hands-on experience
• 5+ years of hands-on offensive security experience (red teaming, penetration testing or adversary simulation) in consulting or in-house
• Strong written and verbal communication, able to explain technical risk to executives
• Comfortable owning work end to end, from scoping to reporting

Required skills

• Red and purple teaming with TTPs and MITRE ATT&CK; threat-intel-driven scenarios such as ransomware simulations (DORA TLPT, TIBER-EU or CBEST a plus)
• Attacking Active Directory, cloud and identity platforms (AWS, Azure, GCP, Entra ID, Okta) and CI/CD pipelines
• C2 frameworks (Mythic, Sliver, Cobalt Strike) and custom tooling in C#, Go, Rust, Python or PowerShell
• OpSec and evasion of EDR; exploit development or reverse engineering a plus
• Network and application penetration testing, including web, API and mobile apps (OWASP Top 10, Burp Suite)
• Understanding of attacks against LLM apps and agents
• OSCP, OSEP, OSWE, OSED, CRTO/CRTL, GXPN, GPEN, BSCP or comparable SANS 600/700-level coursework, and cloud security certifications, are a plus

What we offer

• Hybrid workplace with in-person and remote work, and travel to client sites
• Salary range of $129,000-$205,000, with a 12% bonus target
• Medical, dental and vision coverage, FSA/HSA accounts, life and accident insurance, adoption and fertility assistance, paid parental leave
• Support to present at security conferences and to build new services