Senior Red Team Analyst

Colonial Pipeline Company•Atlanta, GA

About The Position

The Senior Red Team Analyst strengthens Colonial Pipeline’s cybersecurity posture by proactively identifying vulnerabilities, emulating real-world threats, and conducting adversary simulation exercises. The role helps enhance cybersecurity defenses, collaborates across teams to address risk, and validates security controls through rigorous testing. Using knowledge of the MITRE ATT&CK framework and advanced technical expertise, the analyst helps prepare the organization to respond to evolving cyber threats and supports continuous improvement in security practices.

Requirements

At least four years of experience in a hands-on technical security role with a bachelor’s degree, or at least five years of experience in an IT-focused role with security responsibilities.
Experience in cybersecurity, network security, threat analysis, ICS security, infrastructure management, patch management, data analysis, reporting, vulnerability assessment, communication, and security analysis.
Advanced knowledge of offensive security practices.
Advanced documentation skills.
A technical security certification.

Nice To Haves

Bachelor’s degree in Computer and Information Science, Cybersecurity, or a related field.
Six or more years of experience in a hands-on technical security role.
Offensive Security Certified Professional (OSCP), GIAC Exploit Researcher and Advanced Penetration Tester (GXPN), CompTIA PenTest+, Certified Ethical Hacker (CEH), or a similar technical security certification.

Responsibilities

Identify and validate network vulnerabilities using automated tools and manual testing.
Communicate identified vulnerabilities clearly to system owners in support of vulnerability management.
Partner with system owners through remediation and retest vulnerabilities to confirm resolution.
Maintain automated Red Team infrastructure for adversary simulation, repeatable security testing, and Security Operations workflows.
Work with the supervisor to develop and execute Red Team engagement plans that test specific MITRE ATT&CK vectors.
Identify security weaknesses and validate the effectiveness of existing security controls.
Partner with Application Development teams to test applications and provide feedback throughout development.
Help teams deploy secure applications and strengthen the organization’s security posture.
Provide technical expertise to the Cybersecurity Incident Response Team during cybersecurity incidents, as needed.