Senior Red Team Consultant

Bishop Fox

2d • Remote

About The Position

Bishop Fox is seeking remote, US- or Mexico-based red teaming professionals to conduct offensive security work for clients. The role involves leading red teaming engagements from research and organizational profiling through defining attack objectives, creating attack-tree graphs, and planning and carrying out operations across potential attack paths such as networks, web applications, physical environments, and social engineering. Consultants communicate findings about attack surfaces and incident response capabilities, report on actions taken and issues discovered, and provide tailored, actionable recommendations.

As a senior-level, client-facing consultant and trusted advisor, you will solve challenging technical problems, offer expert guidance on business decisions and prioritization of critical findings, lead small teams on specialized engagements, mentor colleagues, and contribute to the consulting practice. The position also includes assessing AI systems and using AI-enabled capabilities, including autonomous and multi-agent systems, to support red team reconnaissance, planning, and execution.

Requirements

• At least 5 years of offensive security experience supporting red teaming and purple teaming engagements across a variety of industries.
• Working knowledge of common operating systems, including Windows, macOS, Linux, and ChromeOS.
• Expertise in Windows Active Directory exploitation and lateral movement.
• Working knowledge of cloud platforms such as AWS, Azure, GCP, O365, and Google Workspace, and container technologies such as Kubernetes and Docker.
• Hands-on experience with command-and-control frameworks such as Sliver, Nighthawk, and Mythic.
• Experience with custom tool and payload development, reverse engineering, and evasion techniques.
• Experience researching and developing EDR evasion techniques.
• Proficiency in multiple programming languages; preferred examples include Python, Golang, JavaScript/TypeScript, C#, C/C++, PowerShell, and Bash.
• Knowledge of network and web protocols such as TCP/IP, HTTP, and HTTPS.
• Demonstrated experience with social engineering, reconnaissance, and developing and delivering phishing or vishing pretexts, along with understanding of email security technologies and related countermeasures.
• Experience assessing AI system security, particularly tool misuse, authorization and trust boundaries, and sensitive data exposure.
• Experience developing and using AI-enabled capabilities, including autonomous agents and multi-agent systems, for red team reconnaissance, attack planning, and execution.
• Excellent written and verbal communication skills.

Nice To Haves

• Expertise in exploit development and/or x86 or ARM assembly.
• Threat modeling, threat intelligence, or incident response experience.
• Experience with DevOps and CI/CD technologies.
• Experience conducting physical penetration testing, including entry skills, RFID hacking, and alarm bypasses.
• OSCP/E, CRTL/CRTO, GPEN, or GXPN certification.

Responsibilities

• Research and profile organizations as part of red teaming engagements.
• Define attack objectives and create attack-tree graphs and other engagement plans.
• Conduct operations to achieve attack objectives across network, web application, physical, social engineering, and other attack paths.
• Help clients understand their attack surface and ability to respond to incidents.
• Report on steps taken and issues discovered, and provide tailored, actionable recommendations.
• Advise clients on difficult business decisions, including prioritizing critical findings.
• Lead small teams on engagements and mentor co-workers.
• Contribute to the advancement of Bishop Fox's consulting practice.
• Assess AI system security, focusing on tool misuse, authorization and trust boundaries, and sensitive data exposure.
• Develop and use AI-enabled capabilities, including autonomous agents and multi-agent systems, to support reconnaissance, attack planning, and execution.

Benefits

• Generous time off and company-wide holidays.
• Team events and international travel opportunities.
• Work-from-home support.
• Monthly cell phone and internet allowance.
• Training budget.
• Retirement plan with 401(k) matching for traditional and Roth accounts in the US.
• Health insurance options, including medical, dental, and vision.
• Paid parental leave.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed