Senior Offensive Security Consultant, Horizon3

• Citizenship Requirement: U.S. Citizen (required for state and local government opportunities)
• 5–10 years of current, hands-on experience in offensive security, red teaming, or penetration testing
• Strong background in web application penetration testing and internal network assessments
• Experience with compliance-focused engagements (PCI DSS, SOC 2, etc.)
• U.S. Citizen (required)
• Excellent written and verbal communication skills, including the ability to explain complex technical issues to both technical and executive audiences
• You should be highly proficient with modern offensive security tooling, including:
• Web Application & API Testing (Core Focus):
• Burp Suite Professional (essential — Repeater, Intruder, Scanner, Extensions, and advanced workflows)
• OWASP ZAP
• Postman / API testing tools
• SQLMap, NoSQLMap, GraphQL tools
• Internal Network & Active Directory:
• CrackMapExec
• BloodHound / SharpHound
• Impacket suite
• Responder, NTLMRelayX
• Metasploit Framework
• Cloud & Infrastructure:
• Pacu, Scout Suite, Prowler
• AzureHound, RoadRecon
• General Exploitation & Productivity:
• Cobalt Strike / Sliver / Covenant (C2 frameworks)
• Nmap, Masscan
• John the Ripper / Hashcat
• Custom scripting (Python, PowerShell, Bash)
• Strong experience writing professional security reports

Desirable

• We’re looking for a Senior Offensive Security Consultant with deep, hands-on experience leading end-to-end penetration testing and red team engagements
• In this role, you’ll assess real customer production environments — including internal networks, web applications, and cloud infrastructure — to uncover vulnerabilities, validate attack paths, and deliver clear, actionable risk insights
• You will primarily lead remote engagements (1–2 weeks in duration) that include both pure red team exercises and compliance-focused testing (PCI DSS, SOC 2, etc.)
• You’ll combine strong technical tradecraft with excellent communication skills to help customers understand and address their security risks
• Lead full-scope penetration testing and red team engagements from scoping through final reporting
• Perform in-depth testing of internal networks, web applications, APIs, cloud environments, and external attack surfaces
• Identify and safely demonstrate business-logic flaws, edge cases, and high-impact attack chains that automated tools often miss
• Review and validate findings from automated platforms, reproducing issues manually where needed
• Deliver high-quality, client-ready reports with clear risk ratings, business impact, and practical remediation guidance
• Collaborate with sales, customer success, and engineering teams to translate findings into product improvements
• Mentor junior consultants and contribute to methodology, tooling, and process enhancements
• Support compliance-driven assessments while maintaining an offensive security mindset