Principal Consultant, Offensive Security, Proactive Services (Unit 42)
Core
Lead offensive security engagements to assess and challenge client security postures, identifying vulnerabilities and providing actionable remediation recommendations.
Role type
Principal Consultant, Offensive Security (IC)
Builds
Penetration test reports, custom security tools/scripts, and risk assessment frameworks for diverse client portfolios.
Domain
Cybersecurity / Offensive Security / Cloud Security
Required skills
Penetration testing, vulnerability assessment, custom script development, client engagement leadership, cyber risk assessment, threat hunting, security frameworks (NIST CSF, ISO 27001, CIS Top 20), cloud security (AWS, GCP, Azure), programming (Python, PowerShell, Ruby, C++)
Preferred skills
Mentoring junior consultants, public speaking, security research publication, computer forensics, incident response
Technologies
Metasploit, Burp Suite Pro, Cobalt Strike, Nessus, Bloodhound, AWS, GCP, Azure
Responsibilities
Conduct comprehensive penetration tests (network, web application, cloud, mobile); Develop custom scripts and tools to automate offensive security engagements; Lead client engagements and articulate testing approaches; Generate detailed reports with remediation recommendations; Perform cyber risk assessments using industry frameworks; Conduct threat hunting and compromise assessments; Collaborate with internal teams and clients on security objectives; Assist in scoping new opportunities and developing internal infrastructure.
Seniority
Principal, hands-on IC with mentorship responsibilities