Job Description
For more than two decades, Bishop Fox has defined the forefront of offensive security. By combining elite human expertise with the power of its proprietary Cosmos AI engine, the firm delivers industry-leading cloud and application security services, including AI-powered penetration testing and AI/LLM security assessments that reflect real-world attacker behavior. Renowned for its innovation and contributions to the open-source community through flagship tools like Sliver and AIMap, Bishop Fox has released 25+ tools and 75+ advisories in the last 10 years.
As a trusted partner to the world’s most recognizable brands, Bishop Fox protects 26 of the Fortune 100, eight of the top 10 global tech companies, all of the top five global media companies, 10 of the top 20 retailers and seven 7 of the top 10 manufacturers. A consistent market leader, Bishop Fox has been recognized as a Leader and “Fast Mover” in the GigaOm Radar for Attack Surface Management for five consecutive years. With a 70 NPS rating, the firm remains the trusted partner for organizations seeking to stay ahead of the evolving threat landscape. Learn more at bishopfox.com
Responsibilities
You are a consulting leader; you see problems and solutions in everything. You have the experience in security consulting to know your way around red teaming and services. You’ve plundered apps and pillaged networks (legally, of course). You have a passion for helping build ethical hackers. At this point, you may have accumulated a few disclosures, written blog posts, and given some industry talks while leading or providing thought leadership to a team of security consultants delivering world-class results for various clients.
The Managing Consultant is a working people manager who participates directly in red team, purple team, and social engineering engagements while supporting the performance and development of their direct reports. Time is expected to be divided approximately equally between technical delivery and management responsibilities, with flexibility as engagement and team needs change.
The manager works alongside consultants to maintain technical proficiency, build trusted relationships, and understand delivery challenges firsthand. They provide coaching, address performance concerns, and partner with the Practice Director to improve how the team operates.
Requirements
People Management and Collaboration
- Demonstrated experience managing people, including providing regular feedback, supporting career development, and addressing performance concerns.
- Experience mentoring technical practitioners through hands-on collaboration, helping them build or improve skills, and guiding them to take on greater responsibility.
- Able to give and receive candid feedback, work through disagreements professionally, and maintain productive relationships with team members, peers, and leadership.
- Experience addressing internal and client concerns, coordinating resolution, and recognizing when additional support or authority is needed.
- Experience coordinating staffing needs and development opportunities with appropriate departments or business units.
Red Team Delivery and Operational Judgment
- At least five years of offensive security experience delivering adversary emulation engagements, including red team and purple team assessments, for clients across multiple industries.
- Experience developing red team attack scenarios and purple team test cases tied to client objectives, with clear rationale for planned activities.
- Demonstrated operational security judgment, including selecting techniques based on assessment objectives, detection risk, and potential client impact.
- Ability to produce and review accurate assessment reports that provide actionable recommendations and use technical evidence to convey security and business impact.
- Experience improving red team capabilities and methodologies and helping others adopt them.
Technical Expertise
- Expertise in Active Directory exploitation and lateral movement.
- Working knowledge of Windows, macOS, and Linux.
- Working knowledge of cloud and enterprise productivity platforms, including AWS, Azure, GCP, Microsoft 365, and Google Workspace.
- Working knowledge of container technologies such as Kubernetes and Docker.
- Hands-on experience with command-and-control (C2) frameworks such as Sliver and Mythic.
- Experience developing and modifying custom tools and payloads, researching and applying EDR evasion techniques, and using reverse engineering where needed to understand or adapt tools.
- Proficiency in multiple programming and / or scripting languages, such as Python, Go, C#, C++, PowerShell, or Bash.
- Ability to analyze network and application communications to troubleshoot tooling, understand unfamiliar systems, and identify opportunities for exploitation.
- Experience conducting social engineering assessments, including reconnaissance and developing and delivering phishing and vishing pretexts, with an understanding of countermeasures.
Preferred Qualifications
- Experience conducting physical security assessments, or an interest in developing that capability with training and mentorship.
- Bishop Fox has always allowed its employees to work remotely, and this role could work anywhere in the United States. Our comprehensive benefits program is tailored to meet your needs at an affordable price. We embrace diversity and an inclusive culture. We value our employees and who they are, which fosters a powerful and collective talent base to successfully serve our clients and the security community with unparalleled expertise.
Why Bishop Fox
At Bishop Fox, we’re driven by a simple mission: deliver exceptional quality to our clients, foster a vibrant and fulfilling environment for our team, and champion excellence within our industry. Our core values, which we live by every day, are:
- Be Excellent to Each Other
- Do the Right Thing
- Do What You’ll Say You’ll Do
- Get Better Together
- Give a Sh*t
- Get Better Together
At Bishop Fox,we’recommitted to providing benefits that support your well-being and professional growth.Here’sa glimpse of what we offer:
- Generous Time Off and Company-Wide Holidays
- Team Events and International Travel Opportunities
- Work From Home Support
- Monthly Allowance for Cell Phone and Internet
- Training Budget
- Retirement; 401k Matching for Traditional and Roth Accounts in the US
- Health Insurance Options Including Medical, Dental, Vision
- Paid Parental Leave
Bishop Fox has always allowed its employees to work remotely, and this role could work anywhere in the United States. Our comprehensive benefits program is tailored to meet your needs at an affordable price. We embrace diversity and an inclusive culture. We value our employees and who they are, which fosters a powerful and collective talent base to successfully serve our clients and the security community with unparalleled expertise.
Bishop Fox is an Equal Opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex including sexual orientation and gender identity, national origin, disability, protected veteran status, or any other characteristic protected by applicable federal, state, or local law. All new hires must pass a background check as a condition of employment.
Interested? Apply today!
