Security Analyst V

#WeAreONEOK –
Fortune 500 company. 100+ years in business. Leading midstream service provider. Safety first. Sustainable operations. Environmentally responsible. Employee focused.

This role serves as a senior offensive security analyst focused on internal red teaming, attack simulation, and threat and detection engineering within the Security Assurance team. This role ensures our systems are evaluated against emerging adversary tactics through continuous validation and threat-informed operations.

Lead adversary simulations, purple-team exercises, and red-team engagements based on real-world threat actor tactics, techniques, and procedures (TTPs).

Partner with Security Operations Center, Engineering, and IT teams to translate offensive security findings into actionable detection content, control improvements, and architectural enhancements.

Develop and validate threat detections based on emerging adversary tradecraft using SIEM, EDR, and security analytics platforms. Measure detection coverage through threat hunting and automated validation.

Perform penetration testing, security architecture reviews, and application security assessments.

Develop custom tooling, automation, attack emulation capabilities, and proof-of-concept exploits to emulate advanced adversary behavior and assess defensive effectiveness.

Experience with Operational Technology (OT) environments, industrial control systems, and associated protocols and security technologies is preferred.

Monitor emerging adversary behaviors and assess organizational exposure through continuous validation of internal and external attack surfaces.

Serve as a technical leader within the Security Assurance team by mentoring team members, driving offensive security strategy, and communicating risk and remediation recommendations to technical and executive stakeholders.

• Bachelor's Degree in information technology, other related field, or an equivalent combination of formal education and the following job related experience:

3 - 6+ years related work experience in information security

3+ years with significant duties in offensive security, read teaming, pentesting, or detection engineering

Experience in a regulated sector. Familiarity with gas / utilities business processes

OSCP
- Off Sec Certified Professional or other relevant Off Sec certifications

GPEN - GAIC Penetration Tester or other relevant GIAC certifications

CISSP Certified Information Systems Security Professional

• Sedentary Work
  - Exerting up to 10 pounds of force occasionally (Occasionally: activity or condition exists up to 1/3 of the time) and/or a negligible amount of force frequently (Frequently: activity or condition exists from 1/3 to 2/3 of the time) to lift, carry, push, pull, or otherwise move objects, including the human body. Sedentary work involves sitting most of the time, but may involve walking or standing for brief periods of time.
  
  Jobs are sedentary if walking and standing are required only occasionally and all other sedentary criteria are met.

Standing:
Remaining on one's feet in an upright position at a work station without moving about (Occasionally)

Walking:
Moving about on foot (Frequently)

Sitting:
Remaining in a seated position (Constantly)

Lifting:
Raising or lowering an object from one level to another (includes upward pulling) (Occasionally)

Carrying:
Transporting an object, usually holding it in the hands or arms, or on the shoulder (Occasionally)

Pushing:
Exerting force upon an object so that the object moves away…