> Markdown version of [/jobs/ext/4358768-offensive-security-consultant-red-team-adversary-simulation](https://www.wearedevelopers.com/jobs/ext/4358768-offensive-security-consultant-red-team-adversary-simulation). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Offensive Security Consultant - Red Team & Adversary Simulation - **Company:** Protiviti Inc. - **Location:** Columbus, OH, United States (Remote available) - **Experience:** Expert - **Salary:** $121,000.0 - $192,000.0 - **Contract:** Permanent contract - **Skills:** Active Directory, Application Programming Interfaces (APIs), Artificial Intelligence, Amazon Web Services, Software System Penetration Testing, Automation of Tests, Microsoft Azure, Burp Suite, C Sharp (Programming Language), Software as a Service, Cloud Computing, Cloud Computing Security, Information Leak Prevention, Monitoring of Systems, Identity and Access Management, Mobile Application Software, Python (Programming Language), Open Web Application Security, Windows PowerShell, Red Team (Cyber Security), Reverse Engineering, Google Cloud, Okta, Large Language Models, Mitre Att&ck, Purple Team (Cyber Security) - **Published:** October 31, 2026 - **Apply:** https://www.careerbuilder.com/job-details/offensive-security-consultant-red-team-adversary-simulation-columbus-oh--fec4653c-2407-4e33-81cb-b05d405dec65 ## About the Role Security Consulting, Simulation, Team Player, Consulting, Customer Relations, Coaching, Penetration Testing, Cloud Computing, Software as a Service (SaaS), Artificial Intelligence (AI), * Experience running red team engagements that emulate real-world threat actors, with a strong command of TTPs and MITRE ATT&CK. * Ability to partner with SOC and detection engineering teams to improve detection and response. * Experience designing threat intel-driven scenarios, including ransomware simulations. Familiarity with DORA TLPT, TIBER-EU, or CBEST is a plus. Tradecraft & Tooling * Hands-on experience attacking Active Directory, cloud and identity platforms (AWS, Azure, GCP, Entra ID, Okta), and CI/CD pipelines. * Proficiency with C2 frameworks (e.g., Mythic, Sliver, Cobalt Strike) and building custom tooling in languages like C#, Go, Rust, Python, or PowerShell. * Strong OpSec and experience evading EDR and other monitoring tools. Exploit development or reverse engineering skills are a plus. Network & Application Penetration Testing * Experience performing internal and external network penetration tests, including vulnerability discovery, exploitation, and privilege escalation. * Experience testing web applications, APIs, and mobile apps, with a solid grasp of the OWASP Top 10 and tools like Burp Suite. * Ability to look past scanner output, validate findings manually, and chain issues into real attack paths. AI & LLM Security * Understanding of attacks against LLM-enabled apps and agents (e.g., prompt injection, data leakage, tool abuse) and interest in using AI to speed up offensive work. Soft Skills * Ability to turn technical findings into clear, actionable reports and conversations for both technical teams and executives. * Creative problem solving-finding a way forward when the obvious path is blocked. * A track record of research, tool releases, blogs, or conference involvement (e.g., Black Hat, DEF CON, BSides) is a plus., * Bachelor's degree in a relevant discipline (e.g., CS, CE, IS, MIS, EE) or equivalent hands-on experience. * 5+ years of hands-on offensive security experience-red teaming, penetration testing, or adversary simulation-in consulting or in-house. * Strong written and verbal communication skills, including producing clear, client-ready reports and presentations. * Certifications such as OSCP, OSEP, OSWE, OSED, CRTO/CRTL, GXPN, GPEN, BSCP, or comparable SANS 600/700-level coursework are a plus. * Cloud security certifications (e.g., AWS Certified Security - Specialty, Microsoft AZ-500, Google Professional Cloud Security Engineer, CCSK) are a plus. Our Hybrid Workplace Protiviti practices a hybrid model, which is a combination of working in person with a purpose and working remotely. This model creates meaningful experiences for our people and our clients while offering a flexible environment. The ratio of remote to in-person requirements vary by client, project, team, and other business factors. Our people work both in-person in local Protiviti offices and on client sites, which can include local or out-of-state travel based on our projects and client requests and commitments. ## Description You'll be both a trusted advisor and a hands-on operator. You'll lead engagements from scoping through executive readout, build lasting relationships with client security teams, and help them understand not just what's broken, but how a real attacker would exploit it and what to fix first. You'll also coach and develop teammates-sharing what you know and learning from them in return. * Plan and execute red team, purple team, and threat-led penetration testing (TLPT) engagements that emulate real-world threat actors across on-prem, cloud, identity, and SaaS environments. * Test the newest attack surface, including AI/LLM-powered applications, agentic workflows, and the identity platforms that connect them. * Use and build AI-assisted tooling and automation to move faster and go deeper during operations. * Develop new tooling, design novel attacks, and contribute to a robust lab of testing tools and equipment built to tackle hundreds of adversary simulation scenarios. * Partner with defenders to turn findings into better detections, faster response, and measurable improvement. * Help shape the future of the practice-if you have an idea for a new service and there's demand for it, we'll help you build it. Why You'll Want to Join * Real-world impact: Your work directly shapes how clients defend against the threats they're facing today. * Room to build: Support to develop tooling, research new techniques, and turn ideas into new services. * Industry visibility: We encourage and support presenting at local, national, and international security conferences. * Variety: Engagements across industries, technologies, and environments-no two operations look the same. * Growth: Work alongside experienced operators, mentor others, and grow your career within a global firm. * Flexibility: A hybrid model that balances purposeful in-person time with remote work. What Will Help You Be Successful * You love offensive security and get energized by finding the path an attacker would take. * You stay current on the threat landscape-new TTPs, tooling, vulnerabilities, and how AI is changing both attack and defense. * You thrive on the puzzle of targeting an organization, chaining weaknesses together, and evading defensive controls. * You enjoy sharing what you know-coaching teammates on engagements, building training, or debating the latest technique. * You care about the client outcome and can translate technical risk into business impact that resonates with security teams and executives alike. * You're comfortable owning work end to end-scoping, execution, reporting, and readout. * You're curious about your clients' businesses and how security risk shows up in their industries. Do Your Talents Include the Following? Technical Skills and Talents, For positions located in San Francisco, CA: Protiviti will consider qualified applicants with criminal histories in a manner consistent with the requirements of the San Francisco Fair Chance Ordinance. For positions located in Los Angeles County, CA: Protiviti will consider for employment qualified applicants with arrest or conviction records in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act. Protiviti is not registered to hire or employ personnel in the following states - West Virginia, Alaska. Protiviti is not licensed or registered as a public accounting firm and does not issue opinions on financial statements or offer attestation services.