Senior Analyst, Cybersecurity Red Team – Offensive Security​/Penetration Testing

Responsibilities

• Develop and enforce cybersecurity policy and strategy
• Protect organizational digital assets from cyber threats and attacks
• Select, develop, deploy, monitor, maintain, and enhance cybersecurity technology
• Perform advanced security monitoring, incident response, and operational risk management
• Identify and track advanced persistent threats (APTs), anomalous activities, and potential intrusions
• Analyze trends in security alerts and events
• Monitor and analyze alerts from SIEM, EDR, DLP, and email threat detection platforms
• Detect anomalous activities, lateral movements, and persistence mechanisms
• Lead cyber-intrusion investigations and forensic analysis
• Conduct vulnerability assessments and penetration testing
• Develop remediation plans and track compliance with security standards
• Contribute to threat hunting and operationalize threat intelligence findings
• Respond to urgent issues outside regular working hours while on-call

• Bachelor’s Degree in a related field, or High School Diploma/GED and 7 years of preferred work experience
• 5 years of related work experience
• 7 years of related work experience to be considered in lieu of a degree
• Knowledge of attacker tactics, techniques, and procedures (TTPs)
• Knowledge of threat intelligence platforms (TIPs)
• Familiarity with SIEM, SOAR, IDS/IPS, and endpoint detection tools
• Experience with Azure security stack
• Knowledge of IAM principles, including RBAC and least privilege
• Experience with compliance in cloud environments
• Ability to lead incident response efforts
• Ability to perform root cause analysis
• Ability to conduct forensic investigations
• Red Team (Offensive Security/Penetration Testing) experience
• CISSP certification listed
• CISM certification listed
• Ability to work on-call outside regular working hours
• Ability to lift and carry 25 lbs.; frequent sitting/standing and keyboard use

Demonstrates expertise in developing and enforcing cybersecurity policies, conducting vulnerability assessments, and leading incident response efforts. Proficient in utilizing threat intelligence platforms and advanced security monitoring tools to protect digital assets and ensure compliance with security standards.

• Cybersecurity Policy Development
• Incident Response Leadership
• Vulnerability Assessment
• Threat Intelligence Analysis
• CISSP Certification

• Cybersecurity Strategy
• Advanced Security Monitoring
• Forensic Analysis
• Penetration Testing
• Root Cause Analysis
• IAM Principles
• Threat Hunting
• Compliance in Cloud Environments
• Attacker Tactics, Techniques, and Procedures (TTPs)
• Red Team Experience

• On-Call Availability
• Problem Solving

• CISSP
• CISM

• Cyber Threats
• Operational Risk Management
• Compliance Standards
• Digital Asset Protection
• Anomalous Activities

• SIEM
• EDR
• DLP
• Azure Security Stack
• Threat Intelligence Platforms (TIPs)
• SOAR
• IDS/IPS