Offensive Security Consultant

Role Description Trusted Ascent is looking to expand offensive security capabilities as part of our growing cybersecurity consulting practice. We are looking for an experienced Offensive Security Consultant who can conduct high-quality security testing for clients, help us establish a repeatable offensive security methodology, and eventually mentor junior consultants in conducting security assessments. We are particularly interested in someone who understands modern, practical penetration testing, including the effective use of automation and AI-assisted techniques without sacrificing professional judgment. Qualifications The ideal candidate has: • 5+ years of professional experience in offensive security (penetration testing, ethical hacking, red teaming). • Strong experience conducting security assessments across multiple environments. • Experience with external and internal network penetration testing. • Experience with web application and API security testing. • Experience with wireless security assessments. • Familiarity with DAST and modern application security testing approaches. • Experience with red teaming, adversary simulation, vulnerability validation, and exploitation. • Strong understanding of common offensive security frameworks, tools, and methodologies. • Experience using automation, scripting, and emerging AI capabilities to improve the efficiency and depth of security testing. • Strong written and verbal communication skills and the ability to explain technical findings to non-technical audiences. • The ability to produce professional penetration-testing reports with clear risk ratings, evidence, business impact, and remediation guidance. • Although not the core focus of this role, experience with Incident response and digital forensics is a strong plus. Must have relevant certifications such as OSCP, GPEN What You May Do Depending on the engagement, responsibilities may include: • Conducting external, internal, wireless, web application, and API penetration tests. • Performing vulnerability validation and controlled exploitation. • Supporting red-team and adversary simulation engagements. • Developing and improving Trusted Ascent's penetration-testing methodology and standards. • Using automation and AI-assisted techniques to improve testing coverage and efficiency. • Performing DAST and other application security testing. • Developing clear executive and technical reports for clients. • Presenting findings and remediation recommendations to client leadership and technical teams. • Helping establish repeatable testing processes and quality standards. • Mentoring and teaching junior consultants how to perform security testing safely and professionally. • Although not the primary focus of this role, it may involve incident response investigations and, where appropriate, forensic analysis. What We Value We are looking for someone who is more than a \"tool operator.\" The right person understands how to think like an attacker, how to test systematically, how to distinguish real risk from noise, and how to communicate what the findings actually mean to the business. We also want someone who enjoys building capability—not just completing individual assessments. Over time, this person can contribute to expanding Trusted Ascent's offensive-security practice. Company Description Trusted Ascent provides personalized, results-driven consulting services focused on Cybersecurity, Risk Management, and Technology Governance. The organization helps businesses build secure and resilient processes that support strategic objectives and regulatory compliance. Drawing on extensive information security consulting experience, Trusted Ascent works with clients to achieve measurable outcomes and stronger security postures. The company applies standards from US and global organizations such as NIST and ISO to help clients assess security controls, reach maturity targets, and meet compliance mandates. Trusted Ascent