Offensive Security Consultant

Gulf Coast Automation Group • Chicago, IL

19h • Remote

About The Position

TalentFish is recruiting an experienced Offensive Security Consultant / Penetration Tester for an established consulting firm focused on cyber, risk, and penetration testing. This growth-driven role is for a consultant-minded tester who prefers deep manual work over scanner-driven checklists and focuses on meaningful attack paths, practical remediation, and helping clients understand and address risk. The role is remote in the United States.

The successful candidate combines technical depth with humility, curiosity, clear communication, sound judgment, and a bias toward practical solutions. They will conduct manual tests across varied environments, develop custom tooling when needed, communicate technical evidence and business impact, and support clients through remediation. Compensation is a base salary of $130,000–$150,000 plus bonus. The position offers remote-first work, challenging client environments, paid training and certifications, conference opportunities, experienced teammates, and opportunities to improve methodology and contribute to research and tooling. H-1B sponsorship is not available. Offers are contingent on completion of a background check, which may include reference, education, employment, drug, criminal-record, and certification or compliance checks as applicable.

Requirements

• At least 5 years of hands-on experience in penetration testing, offensive security consulting, or red team operations.
• Depth in at least one major domain, such as network, Active Directory, web/API, cloud, or red teaming.
• A skills-based certification or equivalent practical proof of ability.
• Proficiency with common industry tools and C2 frameworks.
• Scripting or coding ability useful for automation, tooling, or exploitation.
• Working knowledge of PTES, OWASP, MITRE ATT&CK, and related offensive security references.
• Strong client-facing communication skills and ability to deliver with minimal supervision.
• Ability to explain findings to systems administrators, brief executives on business risk, and listen to clients to understand their environments and constraints.

Nice To Haves

• Previous experience conducting penetration testing in a consulting capacity.
• Experience testing cloud, identity, EDR-protected endpoints, or mature enterprise networks.
• Ability to translate offensive security findings into compliance-relevant risk and remediation guidance.
• Experience with malware development, C2 framework enhancements, and EDR evasion.
• Desire to contribute to a blog and/or speak at industry conferences occasionally.

Responsibilities

• Lead manual penetration tests across network, web/API, cloud, wireless, thick-client, and enterprise environments.
• Execute objective-based red team and adversary simulation engagements when in scope.
• Develop custom proof-of-concept exploits, scripts, and tradecraft when existing tools are insufficient.
• Produce clear reports with attack narratives, evidence, business impact, and prioritized remediation guidance.
• Contribute to methodology, tooling, lab work, research, and deliverables.
• Participate in project kickoff and report delivery meetings.
• Mentor by example through sound judgment, clean execution, and professional communication.
• Support clients through remediation by answering follow-up questions, validating fixes, and explaining findings and their significance.
• Communicate findings to technical and executive audiences, and understand client environments and constraints before recommending fixes.

Benefits

• Uncapped quarterly performance bonus potential.
• Paid training and certifications.
• Conference opportunities.
• Remote-first work.
• Experienced teammates and opportunities to improve methodology, contribute to research and tooling, and deepen technical expertise.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed