Consultant, Offensive Security (OSCP)

We help the world Be Everyday Ready™ Today’s threatscape is relentless. So are we. At Cyderes, we specialize in building practical IAM, exposure management, and risk programs, and stopping active threats fast with MDR that works with your existing security tools — all augmented by AI and driven by seasoned operators. Our tireless global team is laser-focused on cybersecurity, arming organizations with the people, platforms, and perspectives they need to conquer whatever tomorrow throws their way. Role Overview We are hiring a Penetration Testing Consultant to deliver high-quality offensive security assessments for enterprise and mid-market clients. This role is hands-on, client-facing, and execution-focused. You will be responsible for conducting scoped penetration tests, clearly articulating risk, and helping customers understand how real-world attackers would compromise their environments. Responsibilities

Execute penetration testing engagements across networks, applications, cloud, and identity systems

Perform testing aligned to PTES, NIST 800-115, OWASP Top 10, and MITRE ATT&CK

Identify, exploit, and validate vulnerabilities with defensible evidence

Chain findings into realistic attack narratives demonstrating business impact

Support remediation validation and retesting

Participate in scoping, kickoff calls, and technical discussions

Explain findings to both technical and non-technical stakeholders

Respond to client questions during delivery and report readouts

Build trust through professionalism and accuracy

Produce clear penetration testing reports with executive summaries and remediation guidance

Ensure reports meet quality standards with minimal rework

Contribute to standardized templates and reporting improvements

Required Qualifications

3–5+ years of hands-on penetration testing or offensive security experience

Strong knowledge of web, API, network, and Active Directory testing

Experience using tools such as Burp Suite, Nmap, Metasploit, BloodHound

Ability to write professional, executive-ready reports

Strong time management and delivery discipline

Experience testing cloud environments (AWS, Azure, GCP)

Scripting or automation skills (Python, Bash, PowerShell)

Prior consulting or client-facing experience

Relevant certifications such as OSCP, PNPT, GPEN, GWAPT