Advisory Red Co-op - U.S. (2025)

The Advisory Red Co-op position will be part of Security Risk Advisors’ Advisory team. Our style of consulting is dynamic, innovative, fast- paced, and highly rewarding for both our clients and our team. This is an outstanding opportunity to work with a wide variety of tool sets and across various well-known client organizations. Our co-ops are ideally able to spend at least 5 months in their role, although 3-month summer interns will be considered.

Essential Functions

Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

• Penetration Testing: assess internal and external networks for common and custom security flaws that can lead to widespread access to sensitive systems and data.
• Purple Teams: the “open-book” approach to penetration testing, working side-by-side with our internal and client blue teams to strengthen defenses against real attackers.
• Web and Mobile Assessments: dynamic web and mobile application security testing.
• Red Teams: adaptive, flag-based red team engagements designed to demonstrate the impact of a dedicated, persistent attacker.
• Tactical Assessments: social engineering, spear phishing, physical break-ins, product security assessments, industrial control systems, architecture reviews.
• Documentation: document evidence of work in reports and status updates.
• Research and Innovation: use knowledge gained to conduct research initiatives with the purpose of improving our services and giving back to the community. 

Supervisory Responsibility

Not applicable.

Work Environment

This job operates in a professional office environment, and all co-ops are expected to work in the office. This role routinely uses standard office equipment.

Physical Demands

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. While performing the duties of this job, the employee is regularly required to talk and hear; use hands to finger, handle, or feel; and reach with hands and arms. The employee frequently is required to stand and walk. This is a largely sedentary role.

Candidates with disabilities are encouraged to apply and email careers@sra.io with any questions. Reasonable accommodations may be made to enable disabled individuals to perform the essential functions of this role.

Position Type/Expected Hours of Work

This is a full-time position and hours of work and days are Monday through Friday 8:30am to 5pm. Occasional evening and weekend work may be required as job duties demand.

Co-ops are expected to work in-person at their assigned office 4/5 days per week unless otherwise permitted by their supervisor.

Travel

N/A

Other Duties

Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities, and activities may change at any time with or without notice.

Requirements

Required Education and Experience

• In-progress or completed formal cybersecurity training program, including an undergraduate program or cybersecurity certification/boot camp.
• Strong organizational skills with attention to detail.
• Some knowledge around incident investigation, forensics, and advanced threat controls.
• Interest in taking the initiative for personal growth and development.
• Flexibility to accommodate changing schedules of client and project needs.
• Strong written and verbal communication skills with a high level of professionalism.
• Willingness to travel depending on assignments and specializations.
• Punctuality and timely attendance to external client and internal stakeholder needs.

Preferred Qualifications and Experience

• Previous information security experience is a plus.

Benefits

Work with Experts: Robust internal training program, plus Company-paid external training. SRA recognizes the value of professional development for employees. Therefore, we encourage our employees to pursue continuing education and role-specific training.

Corps Training Program: Our SRA Corps training program is a six-week experience for May new hires that begins with one week of orientation at our Philadelphia headquarters. Whether new hires are interns, co-ops, or full-time consultants, SRA Corps members meet our founders, learn our values, and experience a day in the life of a cybersecurity consultant. Following orientation, Corps members return to their home office and participate in trainings such as Consulting 101, Enterprise Networks, Cloud Security and more. Our leaders provide hands-on offensive, defensive, and frameworks boot camps. 

Mental Health Services: SRA has partnered with BetterHelp to provide SRA employees with free mental health support. BetterHelp connects individuals with licensed therapists for chat, video, and phone sessions. 

EEO Statement

Security Risk Advisors is an Equal Opportunity Employer and prohibits discrimination or harassment of any kind. All employment decisions at SRA are based on business needs, job requirements, and individual qualifications, without regard to race, color, sex, sexual orientation, gender identity or expression, age, religion, national origin, disability, marital or family status, veteran status, medical condition, or any similar category protected under federal, state, or local laws.

SRA’s mission is to level up every day to protect our clients and their customers. This begins with our team members and their experience. SRA prides itself on maintaining a culture where team members have a shared sense of support and belonging, consistent with our It’s Personal company value. At SRA, we prioritize transparent career pathing, varied DEI programming and community groups, competitive benefits including mental health support, and an emphasis on a sustainable, healthy, and engaging work culture. SRA has twice been named a Best Place to Work by the Philadelphia Business Journal.

These Essential Functions, Requirements, and Skills are guidelines. If you are a candidate who does not meet this exact job description but can demonstrate excellent organization, attention to detail, professionalism, flexibility, and self-direction in your professional background, we hope you apply. SRA values a diverse workplace and strongly encourages women, people of color, LGBTQ+ individuals, people with disabilities, members of ethnic minorities, and veterans to apply.