Offensive Security Senior Consultant

Crowe•Chicago, IL

About The Position

Crowe is seeking an Offensive Security Senior Consultant to join their Cybersecurity team. This role involves helping organizations navigate evolving threats and regulatory environments by delivering high-value cybersecurity and risk solutions. The consultant will perform advanced Offensive Security engagements for clients across various industries. This position is ideal for professionals who thrive in a fast-paced consulting environment, enjoy solving complex problems, and are passionate about protecting and enabling business success.

Requirements

Bachelor’s degree in information systems, Computer Science, Cybersecurity, Engineering, or related field.
2+ years of experience in cybersecurity, offensive security, or related consulting or industry roles.
Deep working knowledge of operating systems (Windows, Linux/Unix) and databases (SQL, Oracle, etc.).
Working knowledge of networks and the seven layer OSI model.
Proficiency with common offensive security tools and frameworks (e.g., Metasploit, Burp Suite, BloodHound, Nmap, etc.).
Detection engineering or blue team operations knowledge including evasion techniques
Strong scripting or programming skills.
Experience with or curiosity about AI and automation tools in cybersecurity, including secure implementation practices and risk assessments.

Nice To Haves

Progress toward or possession of certifications such as CISSP, OSCP, OSCE, or similar
Strong project management, critical thinking, and interpersonal skills.
Excellent communication and technical writing skills, with the ability to tailor messages to both technical and executive audiences.

Responsibilities

Lead or support Offensive Security engagements including: Internal and external network penetration testing, Web application penetration testing, Wireless penetration testing, Social engineering (phishing, telephone, onsite), Red teaming/Threat emulation, Purple teaming.
Evaluate and test IT controls, application controls, security configurations, and interface/integration security.
Provide practical recommendations for vulnerability remediation.
Conduct cybersecurity assessments across a variety of standards/frameworks (NIST CSF, NIST 800.53, CIS, integrated control frameworks, etc.).
Present findings and recommendations to stakeholders, including IT, Information Security, C-suite and board-level leadership, through clear, concise written and verbal communication.
Serve as an extension of client teams to lead or support program execution activities, including control implementation, metrics/reporting, issue remediation, and continuous improvement initiatives.
Mentor and supervise junior consultants; contribute to team development and internal knowledge-sharing.
Participate in practice development, including service line/methodology innovation and thought leadership.