Offensive Security Consultant

About this role

An Offensive Security Consultant on Mandiant's offensive security consulting team performs Red and Purple Team assessments of customer environments. The role includes end-to-end adversarial emulation of cyber attacks, external penetration testing, and web application, mobile, and wireless security testing.

Consultants execute stages of the attack lifecycle, including initial compromise, privilege escalation, lateral movement, and achievement of defined objectives. Assessments may involve on-premises networks, modern cloud architectures, zero-trust environments, and identity-centric systems. The team emulates ransomware, financial, espionage, and other threat actors to create realistic breach scenarios.

The role also involves creating security tools, researching offensive techniques, incorporating threat actor intelligence, and sharing knowledge through internal presentations. The consultant prepares comprehensive and accurate reports and presentations for technical and executive audiences and acts as an advisor to C-level contacts, security leaders, and other customer stakeholders. Responsibilities include helping scope prospective engagements, leading teams from kickoff through remediation, and mentoring other staff.

Minimum qualifications include a bachelor's degree in Computer Science, Information Systems, Cybersecurity, or a related technical field, or equivalent practical experience. Candidates must have at least three years of experience in offensive security or red teaming, including work involving network, web application, mobile, cloud, social engineering, scripting, or security tool development.

Preferred qualifications include offensive security certifications such as OSCE, OSEP, OSEE, OSCP, CISSP, or CISA, or relevant SANS courses. Experience creating security tools and understanding programming languages such as Python, C#, C/C++, Rust, or similar is preferred. Strong communication skills are needed to explain technical details in reports and presentations to both technical and executive audiences.

The position is associated with Mandiant Consulting within Google Cloud. The posting lists Singapore and Tokyo, Japan as preferred working locations. English proficiency is required for all roles unless the posting states otherwise.