Jobs at Bishop Fox

Conduct offensive security engagements across web applications, APIs, mobile applications, cloud platforms, serverless systems, and AI/LLM environments. Perform hands-on penetration testing, source-code review, vulnerability analysis, exploitation validation, security-control testing, reporting, remediation guidance, client presentations, and retesting. Manage engagements from scoping through delivery while collaborating with clients and internal teams.

Designs, develops, and deploys agentic AI systems for cybersecurity, including vulnerability analysis, threat detection, alert triage, secure code generation, and remediation recommendations. Builds RAG pipelines, LLM integrations, APIs, microservices, and cloud-based platforms. Implements AI guardrails, threat modeling, human-in-the-loop governance, adversarial testing, explainability, and performance optimization while integrating systems with SIEM, SOAR, vulnerability management, and endpoint security tools.

Leads a red team consulting practice while directly managing personnel and participating in red team, purple team, and social engineering engagements. Responsibilities include coaching consultants, coordinating staffing and development, designing attack scenarios, making operational security decisions, reviewing reports, improving methodologies, and maintaining expertise in Active Directory exploitation, cloud platforms, C2 frameworks, custom tooling, EDR evasion, scripting, reverse engineering, and social engineering assessments.

Own commercial accounts across the Central U.S. by generating new business, managing sales cycles, expanding existing customers, forecasting opportunities, leading solution-oriented sales conversations, preparing proposals, and coordinating internal teams through deal closure. The role requires cybersecurity services sales expertise, account development, commercial negotiations, and approximately 20%–30% regional travel.

Own commercial accounts across the East Coast by generating new business, managing sales cycles, expanding existing customers, conducting solution-oriented sales conversations, forecasting opportunities, and closing consulting and managed security services deals. The role develops account plans, engages decision-makers, coordinates internal teams, supports scoping and proposals, manages negotiations, and serves as an escalation point for sales, delivery, and client issues.

Reviews contracts, statements of work, Salesforce records, billing schedules, and non-standard transactions. Supports project setup, invoicing, ASC 606 revenue recognition, milestone billing, purchase orders, payment reconciliation, collections, sales tax administration, employee expense reimbursements, and discrepancy resolution across the bookings-to-cash cycle.

Develop positioning, messaging, go-to-market content, sales collateral, presentations, and enablement materials for Bishop Fox’s offensive security services. Translate complex technical concepts into clear customer-facing narratives, collaborate with executives, sales, partners, and technical SMEs, support offering launches, and manage content projects from concept through delivery. The role requires strong writing, editing, stakeholder alignment, project management, and the ability to work onsite in San Francisco at least two days weekly.

Coordinate and execute partner marketing campaigns, co-marketing initiatives, sponsored events, email outreach, and partner enablement programs. Manage campaign timelines, calendars, deliverables, partner data, deal registrations, lead routing, MDF tracking, and performance reporting. Build partner-facing collateral and messaging, support executive and CISO events, and maintain partner information in Highspot and Salesforce while ensuring marketing campaigns launch accurately and on schedule.

The Penetration Tester will conduct web application penetration tests, identify vulnerabilities, and provide remediation guidance to stakeholders. Candidates should have strong expertise in various security domains such as cloud and network security.

Partner with sales and clients to define security testing scopes, evaluate environments, propose customized offensive-security solutions, produce proposals and documentation, present methodologies to stakeholders, and collaborate with delivery, operations, and marketing to ensure smooth client engagements and continuous process improvement.

As a Penetration Tester at Bishop Fox, you'll perform security assessments on applications and networks, advise clients, and solve technical challenges.