[Remote] Associate Consultant, Red Team Remediation

Note: The job is a remote job and is open to candidates in USA. Armadin is a specialized offensive security firm focused on building advanced AI attackers for adversary emulation and penetration testing. They are seeking Associate Consultants for their Red Team Remediation practice to deliver actionable guidance based on red team findings and to enhance client security posture across various environments.

Responsibilities

• Develop custom, client-specific remediation guidance for red team findings across web application, Active Directory, cloud, and hybrid environments
• Draft clear, technically accurate remediation write-ups including step-by-step guides, code samples, and configuration recommendations
• Review and QA AI-assisted remediation drafts, verifying technical accuracy, validating code, and refining wording for client clarity
• Produce both immediate tactical fixes and longer-term strategic remediation plans tailored to each client's environment
• Contribute to remediation roadmaps that span identity & access management, network, security architecture, data and storage protection, logging and monitoring, governance and risk, and the software development lifecycle
• Participate in client-facing engagements including kickoff calls, status updates, and remediation de-briefs
• Communicate technical findings and remediation recommendations clearly to both technical and non-technical client stakeholders
• Represent the remediation team with credibility and professionalism across all client interactions
• Work alongside senior consultants and red team operators to understand findings and translate them into actionable client guidance
• Contribute to continuous improvement of the team's remediation frameworks, templates, and tooling
• Support multiple concurrent client engagements within a small, high-tempo team

Skills

• 0–2 years of professional experience in cybersecurity, incident response, red team operations, security consulting, or a closely related field
• Foundational knowledge of Active Directory — its architecture, common misconfigurations, and attack/defense patterns
• Understanding of web application security concepts (OWASP Top 10, common vulnerability classes, and remediation approaches)
• Familiarity with at least one major cloud platform (AWS, Azure, or GCP) and its security controls
• Ability to read and evaluate code across common languages (Python, PowerShell, Bash) to verify remediation guidance
• Strong written communication skills and ability to translate complex technical findings into clear, client-ready documentation
• Comfortable working directly with clients on calls, debriefs, and written deliverables
• Internship or co-op experience in incident response, red team, penetration testing, or security consulting
• Hands-on experience with web application remediation
• Familiarity with the MITRE ATT&CK® framework, particularly common attack paths like lateral movement, privilege escalation, and credential theft
• Exposure to enterprise remediation workflows and ticketing systems (Jira, ServiceNow, or similar)
• Scripting experience in Python, PowerShell, or Bash beyond reading code
• Prior client-facing or consulting experience, even in a supporting capacity

Company Overview