Managing Consultant - Red Team

For more than two decades, Bishop Fox has defined the forefront of offensive security. By combining elite human expertise with the power of its proprietary Cosmos AI engine, the firm delivers industry-leading cloud and application security services, including AI-powered penetration testing and AI/LLM security assessments that reflect real-world attacker behavior. Renowned for its innovation and contributions to the open-source community through flagship tools like Sliver and AIMap , Bishop Fox has released 25+ tools and 75+ advisories in the last 10 years. As a trusted partner to the world’s most recognizable brands, Bishop Fox protects 26 of the Fortune 100, eight of the top 10 global tech companies, all of the top five global media companies, 10 of the top 20 retailers and seven 7 of the top 10 manufacturers. A consistent market leader, Bishop Fox has been recognized as a Leader and "Fast Mover" in the GigaOm Radar for Attack Surface Management for five consecutive years. With a 70 NPS rating, the firm remains the trusted partner for organizations seeking to stay ahead of the evolving threat landscape. Learn more at bishopfox.com Responsibilities You are a consulting leader; you see problems and solutions in everything. You have the experience in security consulting to know your way around red teaming and services. You’ve plundered apps and pillaged networks (legally, of course). You have a passion for helping build ethical hackers. At this point, you may have accumulated a few disclosures, written blog posts, and given some industry talks while leading or providing thought leadership to a team of security consultants delivering world-class results for various clients. The Managing Consultant is a working people manager who participates directly in red team, purple team, and social engineering engagements while supporting the performance and development of their direct reports. Time is expected to be divided approximately equally between technical delivery and management responsibilities, with flexibility as engagement and team needs change. The manager works alongside consultants to maintain technical proficiency, build trusted relationships, and understand delivery challenges firsthand. They provide coaching, address performance concerns, and partner with the Practice Director to improve how the team operates. Requirements People Management and Collaboration Demonstrated experience managing people, including providing regular feedback, supporting career development, and addressing performance concerns. Experience mentoring technical practitioners through hands-on collaboration, helping them build or improve skills, and guiding them to take on greater responsibility. Able to give and receive candid feedback, work through disagreements professionally, and maintain productive relationships with team members, peers, and leadership. Experience addressing internal and client concerns, coordinating resolution, and recognizing when additional support or authority is needed. Experience coordinating staffing needs and development opportunities with appropriate departments or business units. Red Team Delivery and Operational Judgment At least five years of offensive security experience delivering adversary emulation engagements, including red team and purple team assessments, for clients across multiple industries. Experience developing red team attack scenarios and purple team test cases tied to client objectives, with clear rationale for planned activities. Demonstrated operational security judgment, including selecting techniques based on assessment objectives, detection risk, and potential client impact. Ability to produce and review accurate assessment reports that provide actionable recommendations and use technical evidence to convey security and business impact. Experience improving red team capabilities and methodologies and helping others adopt them. Technical Expertise Expertise in Active Directory exploitation and lateral movement. Working knowledge of Windows, macOS, and Linux. Working knowledge of cloud and enterprise productivity platforms, including AWS, Azure, GCP, Microsoft 365, and Google Workspace. Working knowledge of container technologies such as Kubernetes and Docker. Hands-on experience with command-and-control (C2) frameworks such as Sliver and Mythic. Experience dev