Red Team Services Consultant
WFA Digital Insight
As the demand for cybersecurity specialists continues to skyrocket, with a projected 32% growth in the field by 2028, companies like CrowdStrike are at the forefront of this trend. The Red Team Services Consultant role stands out for its focus on collaborative, client-centric work, making it an attractive opportunity for those with a passion for offensive security and a knack for clear communication. With the rise of remote work, having digital skills and experience with cloud environments is crucial. Before applying, candidates should be aware that this role requires not only technical depth but also the ability to present complex findings to both technical and non-technical audiences.
Job Description
About the Role
The Red Team Services Consultant position at CrowdStrike is a unique opportunity for experienced offensive security practitioners to join a global leader in cybersecurity. This role is about more than just identifying vulnerabilities; it's about providing actionable insights that help organizations strengthen their security posture. As part of the Red Team, you will work closely with clients across various industries, conducting comprehensive penetration tests and adversary emulation exercises designed to mimic real-world attacks. Your day-to-day activities will include planning, executing, and leading engagements, as well as developing high-quality reports detailing your findings and recommendations for remediation.The success of our Red Team is built on the principle of collaboration, both internally and with our clients. You will work alongside other skilled professionals who share your passion for cybersecurity and your commitment to delivering exceptional results. Your ability to communicate complex technical concepts clearly and effectively will be invaluable in this role, as you will be presenting your findings to a range of stakeholders, from technical teams to senior executives.
What You Will Do
- Execute and lead Red Team and penetration testing engagements across a range of scopes and environments.
- Work as both an operator and engagement manager, coordinating with clients, directing team members, and keeping stakeholders well-informed throughout the engagement.
- Develop high-quality reports documenting attack paths, findings, and pragmatic remediation recommendations.
- Contribute to the team's capability through tool development, research, and methodology improvements.
- Collaborate across CrowdStrike Services functions to help translate offensive findings into concrete defensive improvements.
- Present technical material clearly to non-technical and technical audiences, including senior executives.
- Participate in the development of new offensive tools and techniques.
- Stay updated with the latest threats and technologies, applying this knowledge to improve the efficacy of our Red Team services.
- Engage with clients to understand their specific security challenges and tailor our services to meet their needs.
What We Are Looking For
- Demonstrated experience conducting Red Team and penetration testing engagements.
- Advanced proficiency with common offensive tooling, including C2 frameworks.
- Strong tradecraft, with a focus on OPSEC considerations, detection avoidance, and the ability to adapt TTPs to the target environment.
- Advanced experience attacking Active Directory environments, including privilege escalation, lateral movement, persistence, and credential abuse.
- Extensive knowledge of attacks against Windows, Linux, or macOS, with working familiarity across the others.
- Experience attacking AWS and Azure environments, including identity and access, compute, storage, and network attack paths.
- Familiarity with how cloud misconfigurations chain together into exploitable scenarios.
- Experience developing offensive tooling or automating assessment tasks.
- Comfortable writing code that makes the team faster and more effective.
Nice to Have
- Experience using AI tooling to sharpen and accelerate work.
- Familiarity with containerization and orchestration technologies.
- Knowledge of compliance frameworks and regulatory requirements.
Benefits and Perks
- Competitive compensation package.
- Opportunity to work with a global leader in cybersecurity.
- Collaborative and dynamic work environment.
- Professional development opportunities.
- Flexible and remote work arrangements.
- Access to cutting-edge technologies and tools.
- Comprehensive health insurance.
- Generous paid time off policy.
- Retirement savings plan.
- Employee stock purchase plan.
How to Stand Out
- When applying, make sure to highlight any experience with offensive security tools and technologies, and be prepared to discuss your approach to penetration testing and adversary emulation.
- Developing a portfolio of your work, including any tools you've developed or research you've conducted, can be highly beneficial in standing out as a candidate.
- Practice presenting technical information to non-technical audiences, as this is a critical skill for success in this role.
- Be prepared to discuss your understanding of cloud security and how you stay current with the latest threats and technologies.
- Consider pursuing certifications such as OSCP or CEH to demonstrate your expertise in offensive security.
- In your cover letter, address how your skills and experience align with the specific requirements of the role, and express your passion for cybersecurity and collaborative work environments.
- During interviews, ask about the team's culture and how they support professional development to get a sense of whether the company is a good fit for you.
This is a remote position listed on WFA Digital, the platform for professionals who work from anywhere. Browse more remote jobs across all categories.