Offensive Security Analyst AI

Vanguard • Malvern, PA

1d • Hybrid

About The Position

Global Risk and Security (GR&S) at Vanguard enables business strategy, protects client and Vanguard interests (e.g., assets and data), and stewards a strong risk culture. Our teams leverage enterprise-wide insights, deep expertise, and trusted advice so that across Vanguard leaders and crew drive faster, stronger, risk-informed decisions. Within GR&S, the Enterprise Security and Fraud (ES&F) sub-division is responsible for the global protection of Vanguard crew, property, data, and client assets. We are the trusted advisors that protect the pride of Vanguard with state-of-the-art security and fraud capabilities. We are a world-class destination of highly engaged, passionate, and diverse talent expected to continuously learn and develop in an ever-changing security landscape. Our crew are our greatest resource – by joining our team you will build collaborative long-term relationships and enjoy a suite of benefits that includes comprehensive health and wellness care, work-life balance, and an investment in your future at its core.

Requirements

• Undergraduate degree or equivalent combination of training and experience.
• Minimum of 5 years performing hands-on Pentest combined with vulnerability and threat assessments
• Strong understanding of one or more of the following areas: Linux/Unix, Windows, Network, Mainframe, Storage.
• Must be able to articulate gaps identified during red team exercises
• 10+ years experience in IT security with a minimum of 2 years creating red team exercises.
• Must have a strong understanding of Kali 2.0 with all supporting features
• Demonstrated ability to influence senior IT leadership and senior technical leaders.
• Demonstrated excellent professional, communication, and interpersonal skills.
• Must currently have a CISSP

Nice To Haves

• OSCP strongly preferred

Responsibilities

• Conducts red team and war gaming exercises to challenge Vanguard’s security strategy and effectiveness.
• Leverages war gaming to simulate security incidents, observes Vanguard’s response across monitoring, incidents, and identifies enhancement opportunities.
• Defines rules and parameters for ethical hacking of systems, software and networks to identify and mitigate potential vulnerabilities.
• Defines simulation goals, scenarios, and select use cases.
• Coordinates event logistics including participants, facilitators, facilities, technology, delivery preparation and white papers
• Develops simulation materials and conducts dry-runs.
• Develops after action reports to help justify this investment and uses the results to hone strategies for the overall organization.
• Continues to evolve exercises based on threat trends
• Participates in special projects and performs other duties as assigned.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level