Cyber Offensive Security Senior Associate
grant thorntonDallas (TX)
Cyber Offensive Security Senior Associate
Posted today
grant thorntonDallas (TX)
SENIORITY
Senior
About the role
Overview:
In this role you lead adversarial testing engagements to help clients strengthen their security posture. You will perform hands-on testing across networks, apps, cloud, and AI/ML systems while coordinating with clients and stakeholders. You’ll translate complex findings into actionable remediation and drive discussions with technical teams and executives. You contribute to methodology development and mentor junior staff, shaping our security practice and client outcomes. This position offers a chance to influence security strategy within a collaborative, cross-functional team. Compensation / Benefits hybrid work model in-person requirement at least three days per week flexible schedule options comprehensive benefits packages career-growth opportunities focus on inclusion and diversity
Responsibilities:
Plan and execute network, application, API, and cloud penetration tests from scoping to reporting Design and run threat-informed adversary simulations to validate controls and detection Conduct assume-breach engagements with defensive teams to test detection and containment Perform AI/ML and LLM security testing, including prompt injection and data exfiltration Emulate threat actor TTPs and map activity to MITRE ATT&CK and related frameworks Produce clear, business-focused deliverables and present findings to technical and executive audiences Serve as trusted technical advisor to clients on risk and remediation prioritization Contribute to methodology, tooling, automation, and mentoring junior team members
Key requirements:
3+ years of hands-on offensive security experience Expertise across multiple domains (network, application, cloud, internal infrastructure) Strong understanding of TTPs and frameworks (MITRE ATT&CK, ATLAS, OWASP) Proficiency with industry-standard tooling and C2 frameworks Scripting/automation skills (Python, PowerShell, Bash) Experience with assume-breach or adversary emulation engagements Excellent written and verbal communication for client-ready reports Ability to work independently and manage multiple engagements to meet deadlines strong communication client-facing collaboration problem solving and critical thinking network, application, cloud, and internal infrastructure testing MITRE ATT&CK, ATLAS, OWASP knowledge tooling and command-and-control frameworks
Before you apply
Applying takes about a minute. These four things decide how fast it moves after that.
Your profile is current
It's what we read first. Occupations, seniority and locations matter more than a long history.
Two examples you can talk through
Not a portfolio — just two pieces of work where you can explain the decisions and what you'd change.
A number in mind
What you're on now and what would make you move. We negotiate better when we know both.
Your notice period
Employers plan around it, and it's the question that stalls offers most often.
Once you apply, someone reads it and calls you before anything reaches the employer — usually within two working days.