Cyderes (Cyber Defense and Response) is a pure-play, full life-cycle cybersecurity services provider with award-winning managed security services, identity and access management, and professional services designed to manage the cybersecurity risks of enterprise clients. We specialize in multi-technology, complex environments with the in speed and agility needed to tackle the most advanced cyber threats. We leverage our global scale and decades of experience to accelerate our clients’ cyber outcomes through a full lifecycle of cybersecurity services. We are a global company with operating centers in the United States, Canada, the United Kingdom, and India.
About the Role:
We are seeking a highly skilled and experienced Lead Security Consultant specializing in penetration testing to join our cybersecurity consulting team. In this role, you will lead complex security assessments, manage client relationships, and provide technical leadership and mentorship to junior consultants. You will work across various industries to help clients identify and mitigate security vulnerabilities in their networks, applications, and systems.
Responsibilities:
Lead and execute advanced penetration tests across internal/external networks, web/mobile apps, APIs, cloud, and wireless environmentsPerform vulnerability assessments and exploit development to assess system and application securityDesign and conduct red and purple team exercises simulating real-world adversary tactics (TTPs)Develop assessment plans and tailor testing methodologies to client environmentsCreate detailed, high-quality reports and present findings to technical and executive audiencesServe as client-facing lead throughout the engagement lifecycle (scoping to post-delivery support)Mentor junior consultants and support development of internal tools and methodologiesResearch emerging threats, attack techniques, and offensive security toolsSupport presales efforts including scoping, proposals, and client presentationsConduct threat analysis and provide mitigation guidance based on trends and attack patternsCorrelate and analyse threat data to identify indicators of compromise and attacker behaviourProduce threat intelligence summaries and track evolving trends across industriesCollaborate on cross-functional research projects under tight deadlinesDevelop tools, scripts, and automated processes to enhance testing and reporting workflowsRequirements:
5+ years of hands-on experience in penetration testing and offensive security in of the following areas:Executing network, wireless, web application, and API penetration testsExperience with Active directory (AD) and KerberosExperience conducting vulnerability management and assessmentsExperience conducting social engineering assessmentsExperience conducting Purple Team and Red Team exercisesDeep understanding of network protocols, operating systems, web technologies, and application security conceptsStrong experience with industry-standard tools (e.g., Burp Suite, Cobalt Strike, Metasploit, Nmap, Nessus, etc.)Demonstrated experience conducting Red Team operations or simulated adversary engagementsProficiency in scripting or coding (Python, Bash, PowerShell, etc.)Relevant certifications such as OSCP, OSCE, GPEN, GWAPT, or equivalentExcellent communication skills, both written and verbalAbility to lead teams and manage client expectations in high-pressure environmentsSource code review for control flow and security flawsGeneral knowledge of the MITRE ATT&CK FrameworkCyderes is an Equal Opportunity Employer (EOE). Qualified applicants are considered for employment without regard to race, religion, color, sex, age, disability, sexual orientation, genetic information, national origin, or veteran status.
Note: This job posting is intended for direct applicants only. We request that outside recruiters do not contact us regarding this position.