Senior Security Consultant

DIRECT SUPERVISOR AND OVERALL RESPONSIBILITY

Head of Red Team

Prism Infosec is an established cybersecurity company that has created a working environment

which is driven by people that are passionate about information/cyber security and technology

and where its employees can be part of something great. Through collaboration and teamwork,

Prism Infosec strives to ensure that new skills can be learnt and knowledge and experiences

shared. We are determined to achieve greatness through surrounding ourselves with likeminded

individuals.

We are seeking an experienced Senior Security Consultant to join our Red Team and help clients

understand their true security posture beyond traditional penetration testing. This is not an entry

You will lead and deliver sophisticated Red Team engagements, support blended offensive

operations with our Penetration Testing team, and contribute directly to the continual evolution

of Prism Infosec’s offensive security methodologies, tooling, and tradecraft. This position is ideally

suited to someone who thrives on adversarial thinking, technical depth, autonomy, and creativity.

• Red Team Engagement Delivery:
  End-to-end ownership of covert and overt offensive security operations, ensuring engagements meet defined objectives and maintain operational security.
• Infrastructure & Tooling Management:
  Deployment, maintenance, and secure operation of Red Team infrastructure, C2 systems, custom tooling, and automation capabilities.
• Technical Execution Across Attack Life cycles:
  Reconnaissance, initial access, exploitation, privilege escalation, credential harvesting, lateral movement, cloud persistence, and data access.
• Reporting & Communication:
  Production of high-quality technical and executive-level reports, and delivery of clear verbal debriefs to varied audiences.
• Collaboration & Knowledge Sharing:
  Working with internal security teams—Penetration Testing, OT, and IR—to support joint assessments, share offensive insights, and improve overall defensive posture.
• Research & Development:
  Continuous investigation of new techniques, vulnerabilities, adversary tradecraft, cloud attack paths, and contributions to internal Red Team methodology and tooling.
• Team Development & Mentorship:
  Supporting growth of colleagues through technical guidance, knowledge sharing, review, and encouragement of offensive security skill development.

• Work with the red team manager to plan, design, and deliver full-scope Red Team engagements, from reconnaissance through to achieving agreed objectives.
• Build, configure, and operate Red Team infrastructure, including command-and-control frameworks such as Mythic, Cobalt Strike, or Havoc.
• Conduct exploitation, post-exploitation, lateral movement, and persistence activities across on-premises, hybrid, and cloud estates.
• Identify weaknesses across infrastructure, Active Directory, cloud platforms (Azure/AWS/GCP), and application layers.
• Develop or modify offensive tooling, scripts, payloads, and automation to support engagements.
• Produce clear, detailed, and technically accurate Red Team reports, including findings, impact assessments, and remediation advice.
• Support client briefings and debriefings, explaining attack paths and defensive recommendations to both technical and non-technical stakeholders.
• Collaborate with penetration testers during blended or purple team operations.
• Stay current with emerging attacker TTPs, threat intelligence, cloud exploitation techniques, and novel abuse paths.
• Mentor junior consultants and support capability development across the offensive security team.

• Successfully deliver full-scope Red Team engagements that meet defined objectives, maintain operational security, and provide meaningful, actionable outcomes for clients.
• Consistently produce high-quality technical and executive reporting that clearly communicates attack paths, business impact, and remediation priorities.
• Demonstrate measurable improvements in client detection, response, and resilience through collaborative purple team activities and post-engagement reviews.
• Enhance Prism…