Managing Consultant, Bishop Fox

• Demonstrated experience managing people, including providing regular feedback, supporting career development, and addressing performance concerns
• Experience mentoring technical practitioners through hands-on collaboration, helping them build or improve skills, and guiding them to take on greater responsibility
• Able to give and receive candid feedback, work through disagreements professionally, and maintain productive relationships with team members, peers, and leadership
• Experience addressing internal and client concerns, coordinating resolution, and recognizing when additional support or authority is needed
• Experience coordinating staffing needs and development opportunities with appropriate departments or business units
• At least five years of offensive security experience delivering adversary emulation engagements, including red team and purple team assessments, for clients across multiple industries
• Experience developing red team attack scenarios and purple team test cases tied to client objectives, with clear rationale for planned activities
• Demonstrated operational security judgment, including selecting techniques based on assessment objectives, detection risk, and potential client impact
• Ability to produce and review accurate assessment reports that provide actionable recommendations and use technical evidence to convey security and business impact
• Experience improving red team capabilities and methodologies and helping others adopt them
• Expertise in Active Directory exploitation and lateral movement
• Working knowledge of Windows, macOS, and Linux
• Working knowledge of cloud and enterprise productivity platforms, including AWS, Azure, GCP, Microsoft 365, and Google Workspace
• Working knowledge of container technologies such as Kubernetes and Docker
• Hands-on experience with command-and-control (C2) frameworks such as Sliver and Mythic
• Experience developing and modifying custom tools and payloads, researching and applying EDR evasion techniques, and using reverse engineering where needed to understand or adapt tools
• Proficiency in multiple programming and / or scripting languages, such as Python, Go, C#, C++, PowerShell, or Bash
• Ability to analyze network and application communications to troubleshoot tooling, understand unfamiliar systems, and identify opportunities for exploitation
• Experience conducting social engineering assessments, including reconnaissance and developing and delivering phishing and vishing pretexts, with an understanding of countermeasures

Desirable

• You are a consulting leader; you see problems and solutions in everything
• You have the experience in security consulting to know your way around red teaming and services
• You’ve plundered apps and pillaged networks (legally, of course)
• You have a passion for helping build ethical hackers
• At this point, you may have accumulated a few disclosures, written blog posts, and given some industry talks while leading or providing thought leadership to a team of security consultants delivering world-class results for various clients
• The Managing Consultant is a working people manager who participates directly in red team, purple team, and social engineering engagements while supporting the performance and development of their direct reports
• Time is expected to be divided approximately equally between technical delivery and management responsibilities, with flexibility as engagement and team needs change
• The manager works alongside consultants to maintain technical proficiency, build trusted relationships, and understand delivery challenges firsthand
• They provide coaching, address performance concerns, and partner with the Practice Director to improve how the team operates