Cybersecurity Analyst, Offensive Security
About The Position
The Cybersecurity Analyst, Offensive Security leads and executes full-scope Red Team operations to identify vulnerabilities across IT, cloud, and OT/ICS environments and evaluate organizational detection and response readiness. The role translates offensive insights into measurable defensive improvements through realistic adversary simulations, specialized tool development, and clear, actionable findings. The position plans and leads Red Team engagements, adversary emulation, penetration testing, social engineering campaigns, and OT/ICS assessments within approved Rules of Engagement and safe-testing protocols. It also participates in Purple Team exercises, supports vulnerability assessments and after-hours operations, and collaborates with Blue Team, Threat Intelligence, and IT/OT partners. The role contributes to storm restoration tasks and assigned drills, follows company policies and applicable laws and regulations, and performs other aligned duties as needed. The role requires a bachelor's degree in Cybersecurity, Computer Science, or Information Technology and 3–6 years of relevant offensive security experience, with specified experience-based substitutions available for associate-degree and high-school/GED candidates. Candidates must have at least one relevant certification, such as OSCP, OSCE, CRTO, GPEN, or equivalent, and communicate fluently in Spanish and English. Travel is not required.
Requirements
- Bachelor's degree in Cybersecurity, Computer Science, or Information Technology; qualifying experience may substitute as specified in the posting.
- 3–6 years of experience in offensive security, penetration testing, or Red Teaming.
- Experience with cloud environments such as AWS or Azure and modern enterprise/OT systems.
- Hands-on proficiency with offensive security tools including Kali Linux, Metasploit, Burp Suite, Cobalt Strike, BloodHound, and Nmap.
- Proficiency with scripting languages including Python, PowerShell, and Bash.
- Knowledge of MITRE ATT&CK, OWASP Top 10, and attack vectors across network, web, cloud, identity, and OT environments.
- Working knowledge of ICS/SCADA/OT systems, safe-testing protocols, and cross-team coordination methods.
- Ability to synthesize technical findings into accurate reports with business-impact context and actionable remediation guidance for technical and non-technical audiences.
- Ability to collaborate with Blue Team, Threat Intelligence, IT, and OT partners and contribute to Purple Team exercises.
- Strong ethical standards, sound judgment when handling sensitive information, reliability, and trustworthiness.
- Fluency in both Spanish and English.
- At least one relevant certification: OSCP, OSCE, CRTO, GPEN, or equivalent.
Responsibilities
- Plan, execute, and lead Red Team engagements, adversary emulation, and penetration testing across OT/ICS environments within approved Rules of Engagement.
- Perform full-spectrum offensive operations using real-world tactics, techniques, and procedures to assess detection and response capabilities.
- Conduct phishing, vishing, and physical social engineering campaigns to test human-factor vulnerabilities and improve security awareness.
- Execute OT/ICS assessments using formal safe-testing protocols and cross-team coordination to prevent operational disruption and protect critical infrastructure.
- Participate in Purple Team exercises to validate and improve detection, response, and prevention controls.
- Develop custom offensive tools and scripts to enhance Red Team capabilities and automate operational processes.
- Document technical findings, their impacts, and remediation guidance to support informed decisions and measurable risk reduction.
- Collaborate with Blue Team, Threat Intelligence, and IT/OT teams to translate offensive insights into defensive improvements.
- Maintain expertise on emerging threats, techniques, and tools relevant to the energy sector.
- Support vulnerability assessments and after-hours operations to improve continuous threat exposure management and maintain Red Team readiness.
- Follow established company policies, procedures, and standards, including applicable laws and industry regulations.
- Participate in storm restoration tasks and assigned drills to support the safe and reliable recovery of services.
- Perform additional tasks aligned with role expectations and qualifications.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
