Managing Consultant - Red Team

Bishop Fox

13d•Remote

About The Position

The Managing Consultant is a working people manager who participates directly in red team, purple team, and social engineering engagements while supporting the performance and development of direct reports. Time is expected to be divided approximately equally between technical delivery and management responsibilities, with flexibility based on engagement and team needs. The manager works alongside consultants to maintain technical proficiency, build trusted relationships, and understand delivery challenges firsthand. They coach team members, address performance concerns, and partner with the Practice Director to improve team operations. Bishop Fox is an offensive security firm providing cloud and application security services, including penetration testing and AI/LLM security assessments. The company serves clients across a range of industries and emphasizes exceptional client service, employee development, and contributions to the security community. This role may be performed remotely from anywhere in the United States.

Requirements

Demonstrated experience managing people, including providing regular feedback, supporting career development, and addressing performance concerns.
Experience mentoring technical practitioners through hands-on collaboration, helping them build or improve skills, and guiding them to take on greater responsibility.
Ability to give and receive candid feedback, work through disagreements professionally, and maintain productive relationships with team members, peers, and leadership.
Experience addressing internal and client concerns, coordinating resolution, and recognizing when additional support or authority is needed.
Experience coordinating staffing needs and development opportunities with appropriate departments or business units.
At least five years of offensive security experience delivering adversary emulation engagements, including red team and purple team assessments, for clients across multiple industries.
Experience developing red team attack scenarios and purple team test cases tied to client objectives, with clear rationale for planned activities.
Demonstrated operational security judgment, including selecting techniques based on assessment objectives, detection risk, and potential client impact.
Ability to produce and review accurate assessment reports that provide actionable recommendations and use technical evidence to convey security and business impact.
Experience improving red team capabilities and methodologies and helping others adopt them.
Expertise in Active Directory exploitation and lateral movement.
Working knowledge of Windows, macOS, and Linux.
Working knowledge of cloud and enterprise productivity platforms, including AWS, Azure, GCP, Microsoft 365, and Google Workspace.
Working knowledge of container technologies such as Kubernetes and Docker.
Hands-on experience with command-and-control frameworks such as Sliver and Mythic.
Experience developing and modifying custom tools and payloads, researching and applying EDR evasion techniques, and using reverse engineering where needed to understand or adapt tools.
Proficiency in multiple programming and/or scripting languages, such as Python, Go, C#, C++, PowerShell, or Bash.
Ability to analyze network and application communications to troubleshoot tooling, understand unfamiliar systems, and identify opportunities for exploitation.
Experience conducting social engineering assessments, including reconnaissance and developing and delivering phishing and vishing pretexts, with an understanding of countermeasures.
All new hires must pass a background check as a condition of employment.

Nice To Haves

Experience conducting physical security assessments, or an interest in developing that capability with training and mentorship.

Responsibilities

Participate directly in red team, purple team, and social engineering engagements.
Manage direct reports, including providing regular feedback, supporting career development, and addressing performance concerns.
Mentor technical practitioners through hands-on collaboration and help them build skills and take on greater responsibility.
Maintain technical proficiency and build trusted relationships by working alongside consultants and understanding delivery challenges.
Work with the Practice Director to improve team operations.
Develop red team attack scenarios and purple team test cases tied to client objectives, with clear rationale for planned activities.
Exercise sound operational security judgment by selecting techniques based on assessment objectives, detection risk, and potential client impact.
Produce and review accurate assessment reports with actionable recommendations that use technical evidence to communicate security and business impact.
Improve red team capabilities and methodologies and help others adopt them.
Address internal and client concerns, coordinate their resolution, and recognize when additional support or authority is needed.
Coordinate staffing needs and development opportunities with appropriate departments or business units.
Conduct social engineering assessments, including reconnaissance and developing and delivering phishing and vishing pretexts.