Threat Emulation & Exposure Senior Consultant

Team: IT

Location: US

Commitment: Full-time

Workplace Type: remote

Accountabilities:

Serve as a primary point of contact for customers, coordinating and delivering AI-enabled threat emulation, penetration testing, vulnerability assessments, exposure management, and risk mitigation initiatives.
Lead and support continuous threat exposure management activities to identify security weaknesses and proactively reduce risks across customer IT environments.
Leverage generative AI, agentic technologies, and advanced security platforms to assess vulnerabilities, evaluate exposure, and improve security outcomes.
Refine, analyze, and present findings generated through advanced security tools and AI-powered capabilities, translating technical results into clear, actionable insights for both executive leadership and technical teams.
Develop and communicate recommendations to strengthen security operations, improve technical capabilities, and enhance service delivery.
Collaborate with internal technical teams and customer stakeholders to ensure effective implementation of security recommendations and mitigation strategies.
Mentor and support junior consultants, sharing technical knowledge and promoting best practices across the team.
Requirements:
At least 5 years of professional experience in penetration testing, application security, or related cybersecurity activities is strongly preferred.
Proven experience in vulnerability management, Continuous Threat Exposure Management (CTEM), and technical risk consulting.
Advanced proficiency with security assessment and penetration testing tools such as Metasploit, Nmap, Cobalt Strike, Nessus, and Burp Suite.
Strong understanding of cybersecurity methodologies, security technologies, industry standards, and best practices.
Hands-on experience with Windows, Linux, UNIX, and macOS operating systems.
Advanced knowledge of networking infrastructure and components, including routers, switches, load balancers, and wireless access points.
Experience with firewalls, proxies, mail servers, web servers, and enterprise network environments.
Strong automation and scripting skills, with experience developing and maintaining scripts for applications, systems, and security operations.
Experience providing operational support for operating systems, applications, and network infrastructure.
Familiarity with generative AI and agentic technologies, particularly their application in cybersecurity and security operations.
Demonstrated ability to use AI technologies to improve decision-making, automate workflows, increase operational efficiency, and deliver measurable business outcomes.
Excellent communication and interpersonal skills, with the ability to engage effectively with executive stakeholders, technical teams, and customers.
Active participation in the cybersecurity community, such as speaking at industry conferences or contributing to security tools and projects, is highly desirable.
Relevant certifications such as OSCP, OSEP, GPEN, GXPN, or CRTO are considered an advantage.
Willingness to travel occasionally, with travel expected to remain below 25%.
Benefits:
Competitive annual base salary ranging from $115,000 to $165,000, depending on experience, qualifications, skills, and location.
Eligibility for performance-based bonuses and equity awards.
Comprehensive healthcare coverage and employee benefits.
401(k) retirement savings plan.
Competitive paid vacation and time-off policies.
Paid parental and adoption leave.
Comprehensive physical and mental well-being programs.
Professional development and career growth opportunities for employees at every level.
Remote working flexibility, with autonomy to manage your work and career.
Employee resource groups, local community networks, and volunteering opportunities.
A collaborative, innovation-driven work environment that encourages responsible AI adoption, experimentation, and continuous learning.