Consultant, Offensive Security (OSCP)

We help the world Be Everyday Ready™

Today’s threatscape is relentless. So are we. At Cyderes, we specialize in building practical IAM, exposure management, and risk programs, and stopping active threats fast with MDR that works with your existing security tools — all augmented by AI and driven by seasoned operators. Our tireless global team is laser-focused on cybersecurity, arming organizations with the people, platforms, and perspectives they need to conquer whatever tomorrow throws their way.

Role Overview
We are hiring a Penetration Testing Consultant to deliver high-quality offensive security assessments for enterprise and mid-market clients. This role is hands-on, client-facing, and execution-focused. You will be responsible for conducting scoped penetration tests, clearly articulating risk, and helping customers understand how real-world attackers would compromise their environments.

Responsibilities:
•

Technical Delivery
• Execute penetration testing engagements across networks, applications, cloud, and identity systems
• Perform testing aligned to PTES, NIST 800-115, OWASP Top 10, and MITRE ATT&CK
• Identify, exploit, and validate vulnerabilities with defensible evidence
• Chain findings into realistic attack narratives demonstrating business impact
• Support remediation validation and retesting
Client Engagement
• Participate in scoping, kickoff calls, and technical discussions
• Explain findings to both technical and non-technical stakeholders
• Respond to client questions during delivery and report readouts
• Build trust through professionalism and accuracy
Reporting & Documentation
• Produce clear penetration testing reports with executive summaries and remediation guidance
• Ensure reports meet quality standards with minimal rework
• Contribute to standardized templates and reporting improvements

Required Qualifications:
• 3–5+ years of hands-on penetration testing or offensive security experience
• Strong knowledge of web, API, network, and Active Directory testing
• Experience using tools such as Burp Suite, Nmap, Metasploit, BloodHound
• Ability to write professional, executive-ready reports
• Strong time management and delivery discipline

Preferred Qualifications
• Experience testing cloud environments (AWS, Azure, GCP)
• Scripting or automation skills (Python, Bash, PowerShell)
• Prior consulting or client-facing experience
• Relevant certifications such as OSCP, PNPT, GPEN, GWAPT

Cyderes is an Equal Opportunity Employer (EOE). Qualified applicants are considered for employment without regard to race, religion, color, sex, age, disability, sexual orientation, genetic information, national origin, or veteran status.

Note: This job posting is intended for direct applicants only. We request that outside recruiters do not contact us regarding this position.