Security Analyst V

Job Summary

This role serves as a senior offensive security analyst focused on internal red teaming, attack simulation, and threat and detection engineering within the Security Assurance team. The analyst ensures our systems are evaluated against emerging adversary tactics through continuous validation and threat‑informed operations.

• Lead adversary simulations, purple‑team exercises, and red‑team engagements based on real‑world threat actor tactics, techniques, and procedures (TTPs).
• Partner with Security Operations Center, Engineering, and IT teams to translate offensive security findings into actionable detection content, control improvements, and architectural enhancements.
• Develop and validate threat detections based on emerging adversary tradecraft using SIEM, EDR, and security analytics platforms. Measure detection coverage through threat hunting and automated validation.
• Perform penetration testing, security architecture reviews, and application security assessments.
• Develop custom tooling, automation, attack emulation capabilities, and proof‑of‑concept exploits to emulate advanced adversary behaviour and assess defensive effectiveness.
• Experience with Operational Technology (OT) environments, industrial control systems, and associated protocols and security technologies is preferred.
• Monitor emerging adversary behaviours and assess organizational exposure through continuous validation of internal and external attack surfaces.
• Serve as a technical leader within the Security Assurance team by mentoring team members, driving offensive security strategy, and communicating risk and remediation recommendations to technical and executive stakeholders.

• Bachelor's Degree in information technology, related field, or an equivalent combination of formal education and the following job‑related experience: 6+ years in information security, 3+ years with significant duties in offensive security, read‑team penetration, or detection engineering, and experience in a regulated sector. Familiarity with gas/utilities business processes is a plus.

• OSCP – Off Sec Certified Professional or other relevant Off Sec certifications
• GPEN – GAIC Penetration Tester or other relevant GIAC certifications
• CISSP – Certified Information Systems Security Professional

• Sedentary work – may involve walking or standing for brief periods.
• Weight lifting up to 10 pounds occasionally.
• Standing, walking, and bending occasionally.
• Reaching and handling tasks constantly, requiring manual and finger dexterity.
• Visual, hearing, and speaking demands vary from constant to frequent.

• Well‑lighted, climate‑controlled indoor environment.
• Frequent repetitive motion.
• Computer monitor usage.

• Travel to other locations required.

• May require assignment of a company vehicle and applicable driver’s license.

$ – $

ONEOK is an equal opportunity employer committed to diversity and inclusion. All qualified applicants will receive consideration for employment without regard to race, color, sex, pregnancy, sexual orientation, age, religion, creed, national origin, gender identity, disability, military/veteran status, genetic information or any other categories protected by applicable law.

The job description is not intended to be a complete list of all responsibilities, duties or skills required for the job and is subject to review and change at any time, with or without notice, in accordance with the needs of ONEOK.

ONEOK is committed to making our workplace accessible to individuals with disabilities and will provide reasonable accommodations, upon request, for individuals to participate in the application and hiring process. To request an accommodation email  or call 1‑855‑663‑6547.