Position Summary:
The Human Threats Senior Consultant will work as part of a team assessing the security posture and human-centered detection and response capabilities of client firms against social engineering, insider risk, physical security, and other human-centric attack methods. This role will have an expert level understanding of social engineering tactics, phishing and vishing methodologies, pretext development, human risk assessment, awareness and behavior measurement, and adversary tradecraft targeting people, processes, and technology. They will work closely with the Managing Principal of Human Threats, Project Managers, Directors, and client Points of Contact to effectively meet project timelines and requirements. The Senior Consultant is a technical and strategic leader and mentor with broad and deep consulting skills, meeting the objectives of their engagements, collaborating with clients, mentoring junior teammates, and providing subject matter expertise across two or more human threat domains. The Senior Consultant is a trusted advisor to clients, and through objective testing, assessment activities, and results reporting, supports the client in making well-informed, risk-based decisions to improve overall security posture and resilience against human-centric threats.
What You'll Do
- Conduct human threat engagements including social engineering, phishing, vishing, physical assessments, and human risk evaluations.
- Prepare, review, and approve Human Threat reports to meet quality requirements.
- Manage priorities and tasks to achieve delivery utilization targets.
- Advise clients on all testing and assessment activities in a timely and professional manner.
- Ensure client deliverables and services are delivered on time.
- Continuous professional development in maintaining industry specific certifications and staying current on emerging human threat tactics and trends.
- Establish and maintain positive collaborative relationships with clients and stakeholders.
- Identify up-sell and cross-sell opportunities and escalate to sales.
- Collaborate with project managers, quality management, sales, and other delivery team members to drive customer satisfaction and meet project deliverables.
- Mentor junior consultants in social engineering tradecraft, client communications, reporting, and engagement execution.
- Contribute to the development and refinement of Human Threat methodologies, tooling, playbooks, and service offerings.
- Contribute to thought leadership through research, blogs, whitepapers, webinars, and conference presentations on human threat, and related security topics.
- Support the development of the Human Threat practice through original research, service innovation, and externally facing industry content.
- Represent the Coalfire at industry events, client briefings, and conferences as a subject matter expert.
- Contribute to other offensive security engagements, as needed, based on business demand, skillset alignment, and delivery priorities when not assigned to Human Threat assessments.
- Perform other responsibilities as needed in support of client delivery, practice development, and team success.
What You'll Bring
- 5 - 8 years client-facing consulting experience
- 3 - 5 years experience in social engineering, red team, insider risk, physical security
- Demonstrated expertise of:
- Social engineering principles and techniques
- Phishing, vishing, smishing, and other communication-based attack methods
- Pretext development and adversary emulation against human targets
- Human risk assessments and behavior-based security evaluations
- Report writing and client presentation delivery
- Demonstrated knowledge of:
- Current threat actor tactics, techniques, and procedures involving human targets
- Physical security concepts and badge/access control weaknesses
- Email security controls, identity-based attacks, and user-targeted attack paths
- Security awareness, culture, and behavior change principles
- Ability to travel up to 25%
- Strong writing skills and personal accountability
- Ability to complete work to standards without direct supervision
- Time management
- Demonstrated ability to communicate complex security concepts through written content, client presentations, and public speaking.
- Excellent communication and presentation skills.
Bonus Points
- Knowledge of physical red team tactics and techniques.
- Executive protection or executive-targeted social engineering scenarios.
- Behavioral science, psychology, or influence-based training.
- Threat intelligence related to social engineering campaigns and threat actor tradecraft.
- Advanced social engineering - AI-based social engineering, phishing, pretext calling, impersonation campaigns.
- Insider risk program development.
- Training content development and workshop facilitation.
- Hardware, badge, or access-control related social engineering experience.
- Published research, blogs, whitepapers, or conference presentations related to social engineering, human threat, or offensive security.
Skills Required
- 5 - 8 years client-facing consulting experience
- 3 - 5 years experience in social engineering, red team, insider risk, physical security
- Demonstrated expertise in social engineering principles and techniques
- Demonstrated knowledge of current threat actor tactics, techniques, and procedures
- Ability to travel up to 25%
What We Do
Coalfire is the cybersecurity advisor that helps private and public sector organizations avert threats, close gaps, and effectively manage risk. By providing independent and tailored advice, assessments, technical testing, and cyber engineering services, we help clients develop scalable programs that improve their security posture, achieve their business objectives, and fuel their continued success. Coalfire has been a cybersecurity thought leader for more than 20 years and has offices throughout the United States and Europe.
.jpeg)
