About this role
Senior Associate — Offensive Security / Compromise Assessment (Fusion Center, M&A)
Role Overview
Execute time‑boxed offensive security and compromise assessment work during M&A due diligence and the 120‑day post‑close integration window. Conduct targeted assessments to detect active compromise, validate control gaps, and prioritise remediation to enable safe connectivity and rapid risk reduction across acquired environments.
Key Outcomes
Deliver compromise assessments (host, identity, cloud, email, endpoint) with severity‑ranked findings and day‑0/day‑30 remediation plans.
Run threat‑led testing / purple‑team exercises mapped to MITRE ATT&CK, emphasising ransomware and identity abuse paths.
Stand up rapid evidence collection playbooks and executive readouts for deal teams.
Responsibilities
Plan and execute targeted red/purple‑team engagements and forensic triage to detect ongoing attacks.
Perform identity and tenant hygiene checks (M365/Entra, MFA coverage, conditional access, role drift).
Assess endpoint/EDR and email controls; review SIEM/EDR telemetry and containment readiness.
Validate cloud posture (Azure/AWS) and network segmentation for interim connectivity.
Document findings, risk, and remediation; collaborate with platform owners to land fixes within SLA.
Required Qualifications
3–6+ years in offensive security, incident response, or threat detection.
Hands‑on with EDR, SIEM, identity security, and Windows/Linux triage; familiarity with Microsoft 365/Entra.
Knowledge of attack simulation tools and MITRE ATT&CK; strong report‑writing under tight timelines.
Preferred Qualifications
Certifications such as OSCP/CRTO/eJPT and/or GCFA/GIAC IR track.
Experience in M&A due diligence or compromise assessment programs.
Key Performance Indicators (KPIs)
Mean time to first credible finding.
Percentage of day‑0 criticals remediated within SLA.
Evidence package completeness and quality.
Deal timeline adherence.
#LI-KS1
We are Grant Thornton
At GT Ireland we don’t just predict your future, we build it.
What does this mean for you?
Equity, diversity and inclusion
At Grant Thornton, we provide equitable opportunities for all our colleagues. We are a responsible, sustainable business where equity, diversity and inclusion (ED&I) is at the forefront of our workplace culture agenda, and today, we continue to build and develop on our existing ED&I structure and strategy to meet our workplace culture needs. People are at the heart of our business and teams built with varied individuals present diverse viewpoints, which need to be heard and valued.
We are all at our best when we are able to be ourselves and we view integrity and authenticity as integral values to bring to our day-to-day work-life at the firm. We are excited to see the personality and perspectives you will bring to our team because we know we will all benefit from them. Diversity of thought, background and experience enables better decision-making, improves the quality of our delivery, and helps us to meet the needs of our clients. Our firm is built on people and their ideas, so we want to hear all the new perspectives and fresh thinking you have to offer. You form the bedrock of our firm’s best-practice principles and we will champion you as leaders from day one.
Reward and benefits
Our reward and benefits are designed to create an environment where our people can flourish. We are committed to building a culture where our people have access to the necessary benefits to help promote a healthy lifestyle and thrive.
Recognition
We want to create a culture of recognition and celebrating success, by saying thank you to people who surpass our expectations and recognising the right values and behaviours. Our Shout Out recognition scheme is our way of highlighting and promoting achievements. Whether you simply want to say thank you, celebrate a special occasion or give an award for doing something exceptional, you can do all of this and more through the scheme.
Other facts
About Grant Thornton
In the US, Grant Thornton LLP and Grant Thornton Advisors LLC (and their respective subsidiary entities) practice as an alternative practice structure in accordance with the AICPA Code of Professional Conduct and applicable law, regulations and professional standards. Grant Thornton LLP is a licensed independent CPA firm that provides attest services to its clients, and Grant Thornton Advisors LLC and its subsidiary entities provide tax and business consulting services to their clients. Grant Thornton Advisors LLC and its subsidiary entities are not licensed CPA firms.
With a unified, local presence across seven countries – including the U.S., Ireland, and others, our platform represents a community of 18,000+ problem solvers, relationship builders, and quality-driven industry specialists. Serving clients across 16 distinct industries, we believe how we serve matters as much as what we do. Learn how we go beyond the expectations of business at GT.com.
What you'll do
- The role involves executing offensive security and compromise assessments during M&A due diligence and post-close integration. Responsibilities include planning targeted engagements, performing hygiene checks, and documenting findings for remediation.
Ready to join Grant Thornton?
Take the next step in your career journey