Management Consultant Visa Sponsorship Jobs in Texas
Texas is one of the largest markets for management consultant visa sponsorship jobs in the U.S., with major employers concentrated in Dallas, Houston, and Austin. Firms like Deloitte, McKinsey, BCG, and Accenture maintain significant Texas presences, and the state's energy, technology, and financial services sectors drive consistent demand for consulting talent.
Find Management Consultant JobsOverview
Showing 5 of 1,128+ Management Consultant Jobs in Texas with Visa Sponsorship
See all 1,128+ Management Consultant Jobs in Texas with Visa Sponsorship
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Management Consultant Jobs in Texas with Visa Sponsorship.
Get Access To All JobsLocation: Houston
Other locations: Anywhere in Country
Salary: Competitive
Date: Sep 11, 2026
Job description
Requisition ID: 1744039
Location: Anywhere in Country
At EY, we’re all in to shape your future with confidence.
We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go. Join EY and help to build a better working world.
The Opportunity
Cyber threats, social media, artificial intelligence, privacy requirements, and continuity of the business as usual require heavy information security measures. As a Senior Attack & Penetration Tester, you will contribute to our client’s resilience through the execution of sophisticated offensive security operations.
Your key responsibilities
As a Senior on the Attack & Penetration Testing team, you will plan, lead, and execute complex penetration testing and advanced red team engagements across diverse client environments. You will apply an intelligence-led, threat-informed approach to emulate realistic adversary behaviors, identify exploitable attack paths, and evaluate preventive, detective, and responsive security controls. Your work will span external and internal networks, Active Directory, Microsoft Entra ID, web and mobile applications, application programming interfaces (APIs), cloud environments, wireless networks, social engineering, and physical security scenarios, as permitted by the rules of engagement. You will translate technical testing results into clear, actionable insights for technical and executive audiences. You will work collaboratively with client technical teams to validate identified weaknesses and develop practical remediation or mitigation strategies, including Active Directory security improvements, system-hardening measures, and compensating controls aligned with the client environment and operational constraints. You will also lead technical workstreams, coordinate testing activities, mentor junior team members, contribute to methodology and capability development, and remain current on emerging vulnerabilities, adversary tactics, offensive security tooling, and industry research.
Skills and attributes for success
To thrive in this role, you'll need a blend of technical and business skills, along with the ability to navigate complex problems and make informed decisions. Your professional knowledge and experience will guide you in adhering to broad policies and tackling issues with in-depth evaluations.
- Demonstrate advanced problem-solving and critical-thinking skills when developing and executing attack paths.
- Plan and conduct penetration tests and advanced red team engagements within defined scopes, rules of engagement, and safety constraints.
- Identify, validate, and exploit vulnerabilities across external and internal networks, Active Directory, Microsoft Entra ID, cloud, wireless, web, mobile, and API environments.
- Apply threat-informed testing techniques aligned with the MITRE ATT&CK framework and relevant adversary tactics, techniques, and procedures.
- Lead technical testers, coordinate distributed workstreams, and provide hands-on coaching and quality review for junior team members.
- Recognize when to escalate risks, issues, testing impacts, and opportunities to appropriate client and EY leadership.
- Produce high-quality technical work products, evidence, client reports, and executive-ready presentations that clearly explain risk and remediation priorities.
- Communicate complex offensive security concepts clearly to technical stakeholders, business leaders, and executives.
- Work collaboratively in cross-functional, culturally diverse, and geographically dispersed teams while adhering to service quality and engagement management requirements.
To qualify for the role, you must have:
- A bachelor's degree in Computer Science, Computer Engineering, Cybersecurity, Management Information Systems, Information Technology, Engineering, or a related field, and at least five years of relevant offensive security experience.
- Hands-on experience planning and executing advanced red team engagements, including adversary emulation, objective-based operations, attack-path development, and testing against mature security monitoring and response capabilities.
- Advanced experience conducting external and internal network penetration testing, including host and service enumeration, exploitation, privilege escalation, lateral movement, and post-exploitation activities.
- Experience assessing Active Directory environments, including domain and trust configurations, privileged access, authentication protocols, delegation, Group Policy, credential exposure, certificate services, security configurations, and other identity-based attack paths.
- Experience performing cloud security testing, including identity and access management, exposed services, configuration weaknesses, privilege escalation, and attack-path analysis.
- Experience conducting wireless security assessments, including enterprise and guest wireless configurations, authentication controls, segmentation, and authorized wireless attack techniques.
- Experience testing web applications, mobile applications, and APIs using manual techniques and industry-recognized testing methodologies.
- Experience evaluating security configurations and system-hardening requirements and working with client technical teams to develop practical remediations, mitigations, compensating controls, and validation approaches for identified findings.
- Experience with scripting or programming languages used to automate testing, analyze data, or develop offensive security tooling, such as Python, PowerShell, Bash, C#, Go, Rust, or Java.
- Experience using commercial and open-source penetration testing tools while adapting techniques to client-specific environments and constraints.
- Familiarity with endpoint detection and response (EDR), security information and event management (SIEM), network monitoring, and other defensive controls, including how those controls influence authorized stealth and evasion testing.
- Experience with red team command-and-control (C2) platforms and associated operational infrastructure, payload development, redirectors, logging, and campaign management.
- Experience evaluating and bypassing EDR and other defensive controls during explicitly authorized engagements, including memory, execution, credential access, lateral movement, and persistence techniques designed for stealth testing against mature client environments.
- Working knowledge of the MITRE ATT&CK framework, current vulnerabilities, exploits, adversary tactics, techniques, and procedures, and security remediation practices.
- Experience leading remote and on-site technical teams, managing testing activities within approved rules of engagement, and communicating testing risks or potential operational impacts.
- The ability to develop clear technical findings that describe evidence, exploitation paths, business risk, and actionable remediation guidance.
- Any two relevant offensive security certifications, such as Offensive Security Certified Professional (OSCP), Offensive Security Wireless Professional (OSWP), Offensive Security Experienced Penetration Tester (OSEP), Offensive Security Certified Expert (OSCE), Offensive Security Exploitation Expert (OSEE), GIAC Penetration Tester (GPEN), GIAC Web Application Penetration Tester (GWAPT), GIAC Mobile Device Security Analyst (GMOB), GIAC Cloud Penetration Tester (GCPN), GIAC Exploit Researcher and Advanced Penetration Tester (GXPN), GIAC Red Team Professional (GRTP), GIAC Defending Advanced Threats (GDAT), Certified Red Team Operator (CRTO), Certified Red Team Professional (CRTP), Certified Red Team Expert (CRTE), CREST Registered Penetration Tester (CREST CRT), or Certified Cybersecurity Attack Specialist (CCSAS).
A valid U.S. driver's license and the willingness and flexibility to travel up to 80 percent, domestically and internationally, to meet client needs.
Ideally, you’ll also have
- Hands-on cloud penetration testing and identity security assessment experience across Amazon Web Services (AWS), Microsoft Azure, Microsoft Entra ID, and Google Cloud Platform (GCP), including cloud-native identity, privileged access, service, configuration, and privilege-escalation attack paths in hybrid and fully cloud-based environments.
- Experience assessing Microsoft Entra ID environments, including identity and access management, privileged roles, authentication controls, application registrations, service principals, conditional access, external identities, and cloud-based attack paths for clients operating fully in the cloud without on-premises Active Directory infrastructure.
- Experience applying artificial intelligence (AI) and machine learning capabilities to support testing, including developing automation for reconnaissance, analysis, evidence processing, repeatable test execution, and offensive security workflows.
- Advanced experience with API and application security testing, including authentication, authorization, business logic, data exposure, injection, and platform-specific attack paths.
- Experience evaluating security baselines and hardening standards for Windows, Linux, cloud, and identity environments and helping clients prioritize remediation activities based on risk, feasibility, and operational impact.
- Experience conducting authorized social engineering and physical penetration testing to evaluate personnel, facility, and access-control risks. This includes direct interaction with targeted personnel to assess susceptibility to credential disclosure, unauthorized access requests, and controlled execution of remote access tooling used for command-and-control testing, as well as evaluating physical security controls through lock bypass, access-control evasion, automated security system testing, tailgating, and radio-frequency identification (RFID) badge cloning techniques.
- The ability to develop custom tooling, modify public exploits, build proof-of-concept code, and safely operationalize new offensive techniques.
- Contributions to the security community through research, public vulnerability disclosures, bug bounty acknowledgments, open-source projects, conference presentations, publications, or technical blogs.
- Strong knowledge of Windows, Linux, Unix, TCP/IP networking, common enterprise protocols, and modern identity and security architectures.
- Exemplary verbal and written communication skills, including the ability to facilitate workshops and translate complex technical information into concise, executive-level deliverables.
Proficiency with consulting engagement methodologies, including estimating effort, prioritizing activities, managing dependencies, and aligning technical testing to client objectives.
What we look for
We seek top performers with a passion for cybersecurity and a proven track record of success. Ideal candidates are those who demonstrate agility, critical thinking, and the ability to work collaboratively in a dynamic environment.
What we offer you
At EY, we harness our collective strength to empower you to shape your future with confidence through professional growth, personal fulfillment and an inclusive culture. Learn more at ey.com/us/careers.
- The salary range for this job is:
- New York City, Boston, and Washington DC Metro Areas, Washington State, and Southern California offices – $125,800 to $209,700
- Bay Area California offices – $131,100 to $218,500
- All other offices locations in the US, including Sacramento – $104,800 to $192,200
- Individual salaries within these ranges are determined through a wide variety of factors including but not limited to education, experience, knowledge, skills and geography. In addition, our Total Rewards package includes medical and dental coverage, pension and 401(k) plans, and a wide range of paid time off options.
Are you ready to shape your future with confidence? Apply today.
- To make the most of your application experience, please limit yourself to two applications within a six-month period.
- EY accepts applications for this position on an ongoing basis.
- For those living in California, please click here for additional information.
- At EY, our values set the foundation for how we work and the behaviors we expect of our people. Any misrepresentation or falsification of information or lack of integrity at any point in the recruiting process may result in withdrawal of your candidacy, revocation of an offer or immediate termination of employment.
EY | Building a better working world
EY is building a better working world by creating new value for clients, people, society and the planet, while building trust in capital markets.
Enabled by data, AI and advanced technology, EY teams help clients shape the future with confidence and develop answers for the most pressing issues of today and tomorrow.
EY teams work across a full spectrum of services in assurance, consulting, tax, strategy and transactions. Fueled by sector insights, a globally connected, multi-disciplinary network and diverse ecosystem partners, EY teams can provide services in more than 150 countries and territories.
All in to shape the future with confidence.
EY provides equal employment opportunities to applicants and employees without regard to race, color, religion, age, sex, sexual orientation, gender identity/expression, pregnancy, genetic information, national origin, protected veteran status, disability status, or any other legally protected basis, including arrest and conviction records, in accordance with applicable law.
EY is committed to providing reasonable accommodation to qualified individuals with disabilities including veterans with disabilities. If you have a disability and either need assistance applying online or need to request an accommodation during any part of the application process, please call 1-800-EY-HELP3, select Option 2 for candidate related inquiries, then select Option 1 for candidate queries and finally select Option 2 for candidates with an inquiry which will route you to EY’s Talent Shared Services Team (TSS) or email the TSS at ssc.customersupport@ey.com.
Location: Houston
Other locations: Anywhere in Country
Salary: Competitive
Date: Sep 11, 2026
Job description
Requisition ID: 1744039
Location: Anywhere in Country
At EY, we’re all in to shape your future with confidence.
We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go. Join EY and help to build a better working world.
The Opportunity
Cyber threats, social media, artificial intelligence, privacy requirements, and continuity of the business as usual require heavy information security measures. As a Senior Attack & Penetration Tester, you will contribute to our client’s resilience through the execution of sophisticated offensive security operations.
Your key responsibilities
As a Senior on the Attack & Penetration Testing team, you will plan, lead, and execute complex penetration testing and advanced red team engagements across diverse client environments. You will apply an intelligence-led, threat-informed approach to emulate realistic adversary behaviors, identify exploitable attack paths, and evaluate preventive, detective, and responsive security controls. Your work will span external and internal networks, Active Directory, Microsoft Entra ID, web and mobile applications, application programming interfaces (APIs), cloud environments, wireless networks, social engineering, and physical security scenarios, as permitted by the rules of engagement. You will translate technical testing results into clear, actionable insights for technical and executive audiences. You will work collaboratively with client technical teams to validate identified weaknesses and develop practical remediation or mitigation strategies, including Active Directory security improvements, system-hardening measures, and compensating controls aligned with the client environment and operational constraints. You will also lead technical workstreams, coordinate testing activities, mentor junior team members, contribute to methodology and capability development, and remain current on emerging vulnerabilities, adversary tactics, offensive security tooling, and industry research.
Skills and attributes for success
To thrive in this role, you'll need a blend of technical and business skills, along with the ability to navigate complex problems and make informed decisions. Your professional knowledge and experience will guide you in adhering to broad policies and tackling issues with in-depth evaluations.
- Demonstrate advanced problem-solving and critical-thinking skills when developing and executing attack paths.
- Plan and conduct penetration tests and advanced red team engagements within defined scopes, rules of engagement, and safety constraints.
- Identify, validate, and exploit vulnerabilities across external and internal networks, Active Directory, Microsoft Entra ID, cloud, wireless, web, mobile, and API environments.
- Apply threat-informed testing techniques aligned with the MITRE ATT&CK framework and relevant adversary tactics, techniques, and procedures.
- Lead technical testers, coordinate distributed workstreams, and provide hands-on coaching and quality review for junior team members.
- Recognize when to escalate risks, issues, testing impacts, and opportunities to appropriate client and EY leadership.
- Produce high-quality technical work products, evidence, client reports, and executive-ready presentations that clearly explain risk and remediation priorities.
- Communicate complex offensive security concepts clearly to technical stakeholders, business leaders, and executives.
- Work collaboratively in cross-functional, culturally diverse, and geographically dispersed teams while adhering to service quality and engagement management requirements.
To qualify for the role, you must have:
- A bachelor's degree in Computer Science, Computer Engineering, Cybersecurity, Management Information Systems, Information Technology, Engineering, or a related field, and at least five years of relevant offensive security experience.
- Hands-on experience planning and executing advanced red team engagements, including adversary emulation, objective-based operations, attack-path development, and testing against mature security monitoring and response capabilities.
- Advanced experience conducting external and internal network penetration testing, including host and service enumeration, exploitation, privilege escalation, lateral movement, and post-exploitation activities.
- Experience assessing Active Directory environments, including domain and trust configurations, privileged access, authentication protocols, delegation, Group Policy, credential exposure, certificate services, security configurations, and other identity-based attack paths.
- Experience performing cloud security testing, including identity and access management, exposed services, configuration weaknesses, privilege escalation, and attack-path analysis.
- Experience conducting wireless security assessments, including enterprise and guest wireless configurations, authentication controls, segmentation, and authorized wireless attack techniques.
- Experience testing web applications, mobile applications, and APIs using manual techniques and industry-recognized testing methodologies.
- Experience evaluating security configurations and system-hardening requirements and working with client technical teams to develop practical remediations, mitigations, compensating controls, and validation approaches for identified findings.
- Experience with scripting or programming languages used to automate testing, analyze data, or develop offensive security tooling, such as Python, PowerShell, Bash, C#, Go, Rust, or Java.
- Experience using commercial and open-source penetration testing tools while adapting techniques to client-specific environments and constraints.
- Familiarity with endpoint detection and response (EDR), security information and event management (SIEM), network monitoring, and other defensive controls, including how those controls influence authorized stealth and evasion testing.
- Experience with red team command-and-control (C2) platforms and associated operational infrastructure, payload development, redirectors, logging, and campaign management.
- Experience evaluating and bypassing EDR and other defensive controls during explicitly authorized engagements, including memory, execution, credential access, lateral movement, and persistence techniques designed for stealth testing against mature client environments.
- Working knowledge of the MITRE ATT&CK framework, current vulnerabilities, exploits, adversary tactics, techniques, and procedures, and security remediation practices.
- Experience leading remote and on-site technical teams, managing testing activities within approved rules of engagement, and communicating testing risks or potential operational impacts.
- The ability to develop clear technical findings that describe evidence, exploitation paths, business risk, and actionable remediation guidance.
- Any two relevant offensive security certifications, such as Offensive Security Certified Professional (OSCP), Offensive Security Wireless Professional (OSWP), Offensive Security Experienced Penetration Tester (OSEP), Offensive Security Certified Expert (OSCE), Offensive Security Exploitation Expert (OSEE), GIAC Penetration Tester (GPEN), GIAC Web Application Penetration Tester (GWAPT), GIAC Mobile Device Security Analyst (GMOB), GIAC Cloud Penetration Tester (GCPN), GIAC Exploit Researcher and Advanced Penetration Tester (GXPN), GIAC Red Team Professional (GRTP), GIAC Defending Advanced Threats (GDAT), Certified Red Team Operator (CRTO), Certified Red Team Professional (CRTP), Certified Red Team Expert (CRTE), CREST Registered Penetration Tester (CREST CRT), or Certified Cybersecurity Attack Specialist (CCSAS).
A valid U.S. driver's license and the willingness and flexibility to travel up to 80 percent, domestically and internationally, to meet client needs.
Ideally, you’ll also have
- Hands-on cloud penetration testing and identity security assessment experience across Amazon Web Services (AWS), Microsoft Azure, Microsoft Entra ID, and Google Cloud Platform (GCP), including cloud-native identity, privileged access, service, configuration, and privilege-escalation attack paths in hybrid and fully cloud-based environments.
- Experience assessing Microsoft Entra ID environments, including identity and access management, privileged roles, authentication controls, application registrations, service principals, conditional access, external identities, and cloud-based attack paths for clients operating fully in the cloud without on-premises Active Directory infrastructure.
- Experience applying artificial intelligence (AI) and machine learning capabilities to support testing, including developing automation for reconnaissance, analysis, evidence processing, repeatable test execution, and offensive security workflows.
- Advanced experience with API and application security testing, including authentication, authorization, business logic, data exposure, injection, and platform-specific attack paths.
- Experience evaluating security baselines and hardening standards for Windows, Linux, cloud, and identity environments and helping clients prioritize remediation activities based on risk, feasibility, and operational impact.
- Experience conducting authorized social engineering and physical penetration testing to evaluate personnel, facility, and access-control risks. This includes direct interaction with targeted personnel to assess susceptibility to credential disclosure, unauthorized access requests, and controlled execution of remote access tooling used for command-and-control testing, as well as evaluating physical security controls through lock bypass, access-control evasion, automated security system testing, tailgating, and radio-frequency identification (RFID) badge cloning techniques.
- The ability to develop custom tooling, modify public exploits, build proof-of-concept code, and safely operationalize new offensive techniques.
- Contributions to the security community through research, public vulnerability disclosures, bug bounty acknowledgments, open-source projects, conference presentations, publications, or technical blogs.
- Strong knowledge of Windows, Linux, Unix, TCP/IP networking, common enterprise protocols, and modern identity and security architectures.
- Exemplary verbal and written communication skills, including the ability to facilitate workshops and translate complex technical information into concise, executive-level deliverables.
Proficiency with consulting engagement methodologies, including estimating effort, prioritizing activities, managing dependencies, and aligning technical testing to client objectives.
What we look for
We seek top performers with a passion for cybersecurity and a proven track record of success. Ideal candidates are those who demonstrate agility, critical thinking, and the ability to work collaboratively in a dynamic environment.
What we offer you
At EY, we harness our collective strength to empower you to shape your future with confidence through professional growth, personal fulfillment and an inclusive culture. Learn more at ey.com/us/careers.
- The salary range for this job is:
- New York City, Boston, and Washington DC Metro Areas, Washington State, and Southern California offices – $125,800 to $209,700
- Bay Area California offices – $131,100 to $218,500
- All other offices locations in the US, including Sacramento – $104,800 to $192,200
- Individual salaries within these ranges are determined through a wide variety of factors including but not limited to education, experience, knowledge, skills and geography. In addition, our Total Rewards package includes medical and dental coverage, pension and 401(k) plans, and a wide range of paid time off options.
Are you ready to shape your future with confidence? Apply today.
- To make the most of your application experience, please limit yourself to two applications within a six-month period.
- EY accepts applications for this position on an ongoing basis.
- For those living in California, please click here for additional information.
- At EY, our values set the foundation for how we work and the behaviors we expect of our people. Any misrepresentation or falsification of information or lack of integrity at any point in the recruiting process may result in withdrawal of your candidacy, revocation of an offer or immediate termination of employment.
EY | Building a better working world
EY is building a better working world by creating new value for clients, people, society and the planet, while building trust in capital markets.
Enabled by data, AI and advanced technology, EY teams help clients shape the future with confidence and develop answers for the most pressing issues of today and tomorrow.
EY teams work across a full spectrum of services in assurance, consulting, tax, strategy and transactions. Fueled by sector insights, a globally connected, multi-disciplinary network and diverse ecosystem partners, EY teams can provide services in more than 150 countries and territories.
All in to shape the future with confidence.
EY provides equal employment opportunities to applicants and employees without regard to race, color, religion, age, sex, sexual orientation, gender identity/expression, pregnancy, genetic information, national origin, protected veteran status, disability status, or any other legally protected basis, including arrest and conviction records, in accordance with applicable law.
EY is committed to providing reasonable accommodation to qualified individuals with disabilities including veterans with disabilities. If you have a disability and either need assistance applying online or need to request an accommodation during any part of the application process, please call 1-800-EY-HELP3, select Option 2 for candidate related inquiries, then select Option 1 for candidate queries and finally select Option 2 for candidates with an inquiry which will route you to EY’s Talent Shared Services Team (TSS) or email the TSS at ssc.customersupport@ey.com.
Management Consultant Job Roles in Texas
See all 1,128+ Management Consultant Jobs in Texas
Sign up for free to filter by visa type, set job alerts, and find employers with verified sponsorship history.
Search Management Consultant Jobs in TexasManagement Consultant Jobs in Texas: Frequently Asked Questions
Which companies sponsor visas for management consultants in Texas?
The large global consulting firms, including Deloitte, McKinsey, Boston Consulting Group, Bain, Accenture, and PwC, have well-established sponsorship programs and active Texas offices. Beyond the Big Four and MBB, energy companies like ExxonMobil and Chevron hire management consultants internally in Houston and also work with sponsored consultants through third-party engagements. Sponsorship patterns vary by firm size and project pipeline, so researching each employer's H-1B visa filing history is a practical starting point.
Which visa types are most common for management consultant roles in Texas?
The H-1B is the most common visa category for management consultants in Texas, as the role typically qualifies as a specialty occupation requiring at least a bachelor's degree in business, management, engineering, or a related field. Candidates from Australia may be eligible for the E-3 visa, which has no lottery and renews every two years. Canadian and Mexican nationals should look into the TN visa under the USMCA, which covers management consultants as a listed profession.
How to find management consultant visa sponsorship jobs in Texas?
Migrate Mate is the most direct way to find management consultant visa sponsorship jobs filtered specifically to Texas. The platform aggregates roles from employers with verified sponsorship histories, so you can filter by state and role without sifting through postings that don't support work visa applications. Focusing your search on Dallas, Houston, and Austin will return the highest volume of results, as those metros concentrate the majority of Texas consulting hiring activity.
Which cities in Texas have the most management consultant sponsorship jobs?
Dallas and its surrounding metro, including Fort Worth and Plano, is the single largest hub for management consulting in Texas, driven by corporate headquarters and the financial services sector. Houston is the dominant market for energy-sector consulting, with firms specializing in oil and gas, infrastructure, and supply chain concentrated there. Austin has grown significantly as a technology consulting center, particularly for firms supporting the wave of tech companies that relocated or expanded there in recent years.
Are there any Texas-specific considerations for management consultants seeking visa sponsorship?
Texas has no state income tax, which affects how prevailing wage calculations compare to offers in higher-tax states, though federal H-1B wage requirements still apply. The concentration of energy sector clients in Houston means consultants with backgrounds in oil and gas, renewables, or utilities are particularly competitive. University programs at UT Austin, Rice, and SMU produce a strong domestic pipeline, so international candidates with specialized industry expertise or prior U.S. consulting experience tend to stand out most to Texas-based employers.
What is the prevailing wage for sponsored management consultant jobs in Texas?
U.S. employers sponsoring a visa must pay at least the prevailing wage, which is what workers in the same role, area, and experience level typically earn. The Department of Labor sets this rate to make sure companies aren't hiring foreign workers simply because they'd accept lower pay than a U.S. worker. It varies by job title, location, and experience. You can look up current prevailing wage rates for any occupation and location using the OFLC Wage Search page.