Senior Offensive Security Consultant

• Lead or support internal and external network penetration testing engagements
• Conduct web application and wireless penetration testing
• Perform social engineering, including phishing, telephone, and onsite exercises
• Conduct red teaming/threat emulation and purple teaming
• Evaluate IT controls, application controls, security configurations, and interface/integration security
• Provide practical vulnerability remediation recommendations
• Conduct cybersecurity assessments using NIST CSF, NIST 800.53, CIS, and integrated control frameworks
• Present findings and recommendations to IT, Information Security, C-suite, and board-level stakeholders
• Lead or support client program execution, including control implementation, metrics/reporting, issue remediation, and continuous improvement
• Mentor and supervise junior consultants
• Contribute to team development, internal knowledge-sharing, practice development, methodology innovation, and thought leadership

• Bachelor’s degree in information systems, Computer Science, Cybersecurity, Engineering, or related field
• 2+ years of experience in cybersecurity, offensive security, or related consulting or industry roles
• Deep working knowledge of Windows, Linux/Unix, and databases such as SQL and Oracle
• Working knowledge of networks and the seven-layer OSI model
• Proficiency with offensive security tools and frameworks such as Metasploit, Burp Suite, Blood Hound, and Nmap
• Detection engineering or blue team operations knowledge, including evasion techniques
• Strong scripting or programming skills
• Experience with or curiosity about AI and automation tools in cybersecurity, including secure implementation practices and risk assessments
• Progress toward or possession of certifications such as CISSP, OSCP, OSCE, or similar preferred
• Strong project management, critical thinking, and interpersonal skills
• Excellent communication and technical writing skills, with ability to tailor messages to technical and executive audiences
• Ability to uphold Crowe’s values and act ethically and with integrity
• Must verify identity and eligibility to work in the United States
• Crowe is not sponsoring work authorization

Demonstrates expertise in cybersecurity assessments, penetration testing, and vulnerability remediation, with a strong foundation in offensive security tools and frameworks. Capable of effectively communicating findings to diverse stakeholders and mentoring junior team members.

• Penetration Testing
• Offensive Security Tools
• Cybersecurity Assessments
• Project Management
• Technical Writing

• Cybersecurity
• Vulnerability Remediation
• Scripting
• Windows
• Linux/Unix
• SQL
• Oracle
• Networks
• OSI Model
• Detection Engineering

• Critical Thinking
• Interpersonal Skills
• Communication Skills

• CISSP
• OSCP
• OSCE

• NIST CSF
• NIST 800.53
• CIS
• Red Teaming
• Purple Teaming

• Metasploit
• Burp Suite
• Blood Hound
• Nmap
• AI Tools
• Automation Tools