Associate Principal Red Team Consultant

UltraViolet Cyber is hiring a full-time Associate Principal Red Team Consultant in the United States to design and lead realistic adversary simulations that strengthen the security posture of enterprise organizations. If you thrive on emulating sophisticated threat actors and translating offensive findings into clear business risk, this offensive security role is built for you.

About the Role

As an Associate Principal Red Team Consultant at UltraViolet Cyber, you will join our offensive security practice in a mid-to-senior, client-facing capacity. You will scope, build, and run scenario-driven attack simulations for enterprise clients across many industries, pairing hands-on technical depth with the communication skills needed to brief both engineers and executives on the risks you uncover.

Key Responsibilities

• Own red team engagements end to end — scoping, planning, hands-on execution, and reporting.
• Emulate advanced persistent threat (APT) behavior across on-premises networks and cloud platforms.
• Chain multi-stage attacks spanning network compromise, Active Directory abuse, cloud exploitation, and data exfiltration.
• Build and run social engineering operations, including phishing, vishing, and smishing campaigns.
• Test hybrid and cloud-native environments across AWS, Azure, and GCP.
• Engineer custom tooling, payloads, and tradecraft to defeat modern defenses such as EDR, SIEM, and CASB.
• Write actionable reports tuned for technical teams and executive audiences alike.
• Partner with blue team and MDR colleagues on collaborative purple team assessments.
• Coach junior consultants and help grow the team's internal capabilities.
• Track emerging adversary TTPs, tooling, and research.

Qualifications

• U.S. Citizenship is required.
• 4+ years in offensive security, penetration testing, or red team roles, with proven experience leading full red team engagements rather than isolated component tests.
• Strong grasp of red teaming methodology and attack patterns, with C2 frameworks such as Cobalt Strike, Metasploit, Sliver, or Havoc.
• Ability to build and adapt tooling in Python, PowerShell, C/C#, or Go.
• Deep Active Directory attack knowledge — Kerberoasting, AS-REP roasting, ACL abuse, DCSync, and delegation attacks — plus lateral movement, credential access, and persistence.
• Familiarity with AV/EDR evasion, AMSI bypass, LOLBins, and protocols including SMB, LDAP, Kerberos, DNS, RDP, and WinRM.
• Hands-on cloud attack experience in at least one of AWS, Azure, or GCP, with related red team tooling.
• Experience designing phishing simulations and familiarity with pretexting, vishing, physical access, and email gateway evasion.
• Preferred: OSCP, CRTO, CRTE, PNPT, or CRTL certifications; cloud security credentials; consulting experience; exposure to TIBER-EU or CBEST frameworks; published research, CVEs, or conference talks.
• Excellent written and verbal communication, comfort presenting to C-suite stakeholders, a mentorship mindset, strict ethical and confidentiality standards, and willingness to travel up to roughly 25%.

About UltraViolet Cyber

UltraViolet Cyber is a platform-enabled unified security operations company founded and run by seasoned practitioners. Its security-as-code platform blends technology and human expertise to deliver continuous identification, detection, and resilience for Fortune 500, Federal Government, and commercial clients. Headquartered in McLean, Virginia, UltraViolet Cyber operates offices across the U.S. and in India, and welcomes diversity across every dimension of its workforce.

How to Apply

To apply, complete your application directly on this page, or you'll be redirected to the employer's application platform to finish submitting there.