[Hiring] Managing Consultant @Bishop Fox

Role Description

You are a consulting leader; you see problems and solutions in everything. You have the experience in security consulting to know your way around red teaming and services. You’ve plundered apps and pillaged networks (legally, of course). You have a passion for helping build ethical hackers. At this point, you may have accumulated a few disclosures, written blog posts, and given some industry talks while leading or providing thought leadership to a team of security consultants delivering world-class results for various clients.

The Managing Consultant is a working people manager who participates directly in red team, purple team, and social engineering engagements while supporting the performance and development of their direct reports. Time is expected to be divided approximately equally between technical delivery and management responsibilities, with flexibility as engagement and team needs change.

The manager works alongside consultants to maintain technical proficiency, build trusted relationships, and understand delivery challenges firsthand. They provide coaching, address performance concerns, and partner with the Practice Director to improve how the team operates.

Qualifications

• Demonstrated experience managing people, including providing regular feedback, supporting career development, and addressing performance concerns.
• Experience mentoring technical practitioners through hands-on collaboration, helping them build or improve skills, and guiding them to take on greater responsibility.
• Able to give and receive candid feedback, work through disagreements professionally, and maintain productive relationships with team members, peers, and leadership.
• Experience addressing internal and client concerns, coordinating resolution, and recognizing when additional support or authority is needed.
• Experience coordinating staffing needs and development opportunities with appropriate departments or business units.
• At least five years of offensive security experience delivering adversary emulation engagements, including red team and purple team assessments, for clients across multiple industries.
• Experience developing red team attack scenarios and purple team test cases tied to client objectives, with clear rationale for planned activities.
• Demonstrated operational security judgment, including selecting techniques based on assessment objectives, detection risk, and potential client impact.
• Ability to produce and review accurate assessment reports that provide actionable recommendations and use technical evidence to convey security and business impact.
• Experience improving red team capabilities and methodologies and helping others adopt them.
• Expertise in Active Directory exploitation and lateral movement.
• Working knowledge of Windows, macOS, and Linux.
• Working knowledge of cloud and enterprise productivity platforms, including AWS, Azure, GCP, Microsoft 365, and Google Workspace.
• Working knowledge of container technologies such as Kubernetes and Docker.
• Hands-on experience with command-and-control (C2) frameworks such as Sliver and Mythic.
• Experience developing and modifying custom tools and payloads, researching and applying EDR evasion techniques, and using reverse engineering where needed to understand or adapt tools.
• Proficiency in multiple programming and/or scripting languages, such as Python, Go, C#, C++, PowerShell, or Bash.
• Ability to analyze network and application communications to troubleshoot tooling, understand unfamiliar systems, and identify opportunities for exploitation.
• Experience conducting social engineering assessments, including reconnaissance and developing and delivering phishing and vishing pretexts, with an understanding of countermeasures.

Benefits

• Generous Time Off and Company-Wide Holidays
• Team Events and International Travel Opportunities
• Work From Home Support
• Monthly Allowance for Cell Phone and Internet
• Training Budget
• Retirement; 401k Matching for Traditional and Roth Accounts in the US
• Health Insurance Options Including Medical, Dental, Vision
• Paid Parental Leave

Company Description

Bishop Fox has always allowed its employees to work remotely, and this role could work anywhere in the United States. Our comprehensive benefits program is tailored to meet your needs at an affordable price. We embrace diversity and an inclusive culture. We value our employees and who they are, which fosters a powerful and collective talent base to successfully serve our clients and the security community with unparalleled expertise.

Bishop Fox is an Equal Opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex including sexual orientation and gender identity, national origin, disability, protected veteran status, or any other characteristic protected by applicable federal, state, or local law. All new hires must pass a background check as a condition of employment.

Interested? Apply today!