Principal Consultant

This position will be fully remote and can be hired anywhere in the continental U.S.

An Attack & Penetration Principal Consultant is a highly skilled penetration tester proficient in both technical and soft skills, capable of acting as is the technical lead on large, complex deals, delivering high-end services, improving our industry reputation, and up-leveling consultants, deliverables, and services. An Attack & Penetration Principal Consultant is also responsible for the technical leadership of the practice, driving development and continuous improvement. 

How you’ll make an impact: 

• Provide thought leadership, through participation in industry groups, delivering talks, writing technical and industry specific blogs, vulnerability research, industry PR interviews, and/or contributing to security publications  

• Contribute to internal team building, knowledge transfer, and training activities within the Attack & Penetration team.  

• Improve methodologies, tooling, reporting and other processes to improve and enhance inter- and intra-team efficiency, assist in the development and roll-out of new methods and tools.  

• Able to deliver and lead other consultants in complex projects.  

• Leverage cutting-edge techniques, tools, and procedures (TTPs), to covertly compromise clients. 

• Leverage cloud-based assets to execute targeted assessments. 

• Creatively use identified vulnerabilities across a client’s entire security posture (logical, physical, social) to demonstrate meaningful risks to clients based on industry and business focus. 

• Create comprehensive assessment reports that clearly identify root cause and remediation strategies. 

• Interface with client personnel to gather information, clarify scope and investigate security controls. 

• Execute projects using established methodology, tools, and documentation. 

• Collaborate with other team members and practices to complete client projects and practice contributions. 

• Provide support in the ongoing development of security assessment offerings through tool creation and process improvement. 

• Contribute content to the Optiv blog and present on security in webinars and at conferences. 

Qualifications for success: 

• Eight (8) years of experience performing Vulnerability Assessments, Penetration Tests, Wireless Security Assessments and/or Social Engineering to enterprise-level organizations. 

• Previous job experience in an information security consulting services role. 

• Certifications such as OSCP, OSCE, CREST CRT, GIAC (GXPN, GWAPT, GPEN, GMOB) others are highly desired. 

• Bachelor’s Degree from a four-year college or university in Information Assurance, Computer Science, Management Information Systems, or related area of study; or related experience and/or training; or equivalent combination of education and experience strongly preferred. 

• Demonstrated ability to deliver projects using well-defined methodology across various security assessment disciplines including: 

• Ability to combine multiple separate findings to execute