Security Consultant – Threat & Attack Simulation

GuidePoint Security

Security Consultant delivering cybersecurity solutions for Threat & Attack Simulation Practice. Engaging in assessments, reporting, and practice development while ensuring client satisfaction.

Posted 7/8/2026full-timeRemote • 🇺🇸 United StatesJuniorMid-LevelWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Threat and Attack Simulation services, including Vulnerability Assessments and Penetration Testing, while effectively communicating technical findings to diverse audiences. Proficient in utilizing automation and scripting to enhance security assessment processes and client engagement.

Highest-signal resume keywords

Vulnerability AssessmentPenetration TestingBreach and Attack Simulation (BAS)Cloud Security (AWS, Azure, GCP)OSCP Certification

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Vulnerability AssessmentPenetration TestingScriptingAutomationOrchestrationContinuous Penetration TestingSecurity Tool DevelopmentTechnical WritingClient Relationship ManagementPractice Development

Soft Skills

CommunicationAdaptabilityProblem-SolvingCollaborationClient Support

Tools & Technologies

Breach and Attack Simulation (BAS) PlatformsCloud ComponentsSecurity Assessment ToolsAutomation ToolsOrchestration Tools

Certifications & Qualifications

OSCPOSCEOSEEGSEGPENGCIH

Industry Keywords

Information SecurityOffensive SecurityCybersecurityThreat SimulationSocial EngineeringIT SecurityEmerging TechnologiesAI ToolsConsulting ServicesIndustry Conferences

Tech Stack

Tools & technologies

AWSAzureCloudGoogle Cloud Platform

About the role

Key responsibilities & impact

Deliver Threat & Attack Simulation's professional services, including but not limited to Vulnerability Assessments, Internal and External Penetration Tests, Wireless Security Assessments, Onsite and Remote Social Engineering, and a variety of custom assessments
Author comprehensive assessment deliverables that are proficiently tailored to both technical and managerial audiences and fully detail the technical execution, core deficiencies, business impact, and realistic remediation strategies
Utilize automation, orchestration, and scripting to reduce manual processes, improving overall efficiency while also enabling new capabilities to meet the rapidly changing needs of our clients
Contribute to marketing initiatives via activities such as publishing research, speaking at industry conferences, authoring blog articles and whitepapers, hosting webinars, and developing security tools
Assist with Practice development, including improving existing offerings
Perpetually strengthen relevant skills, knowledge, and abilities to stay at the forefront of the information security industry.
Foster client relationships by providing support, information, and guidance
Configure, operate, and manage a Breach and Attack Simulation (BAS) or continuous penetration testing platform and report results to relevant stakeholders promptly
Maintain a strong desire to learn, adapt, and improve along with a rapidly-growing company
Perform other duties as assigned

Requirements

What you’ll need

Lab-based certifications, such as OSCP, OSCE, OSEE, and GSE, are strongly preferred.
Other relevant industry certifications, such as GPEN and GCIH, are also preferred.
Experience with various public cloud components and architectures (AWS, Azure, GCP, etc.)
InfoSec community involvement, such as conference speaking, blog/whitepaper authoring, and podcast speaking/producing experience, is strongly preferred.
Minimum of two (2) years of experience performing offensive/attack-oriented security assessments
Minimum of one (1) year of experience in an enterprise-level consulting services role
Over four (4+) combined years of IT and information security experience are preferred.
Internal operational (non-consulting) experience is strongly preferred.
Experience with continuous penetration testing or Breach and Attack Simulation (BAS) platforms is a plus but not required.
Embraces emerging technologies, including AI tools, to work smarter, solve problems, and drive better business outcomes.

Benefits

Comp & perks

Remote workforce primarily (U.S. based only, some travel may be required for certain positions, working on-site may be required for Federal positions)
Group Medical Insurance options: Zero Deductible PPO Plan (GuidePoint pays 90% of the premium for employees and 70% for family plans (spouse/children/family) or High Deductible Health Plan with HSA (GuidePoint pays 100% of the employees premiums and 75% for family plans (spouse/children/family). If you choose the High Deductible / HSA plan, GPS will contribute in 4 equal quarterly installments: ($850 per EE annually / $1750 per family annually (includes spouse/children/family options)
Group Dental Insurance: GuidePoint pays 100% of the premium for employees and 75% of family plans
12 corporate holidays and a Flexible Time Off (FTO) program
Healthy mobile phone and home internet allowance
Eligibility for retirement plan after 2 months at open enrollment
Pet Benefit Option