Senior Red Team Analyst

Colonial Pipeline Company•Atlanta, GA

About The Position

The Senior Red Team Analyst helps strengthen Colonial Pipeline’s cybersecurity posture by proactively identifying vulnerabilities, emulating real-world threats, and conducting adversary simulation exercises. The role enhances defenses, collaborates across teams to address risk, and validates security controls through rigorous testing. It applies knowledge of the MITRE ATT&CK framework and advanced technical expertise to help prepare the organization for evolving cyber threats and support continuous improvement in security practices.

Requirements

At least four years of experience in a hands-on technical security role with a bachelor’s degree, or at least five years of experience in an IT-focused role with security responsibilities.
Experience in cybersecurity, network security, threat analysis, ICS security, infrastructure management, patch management, data analysis, reporting, vulnerability assessment, communication, and security analysis.
Advanced knowledge of offensive security practices.
Advanced documentation skills.
A technical security certification.

Nice To Haves

Bachelor’s degree in Computer and Information Science, Cybersecurity, or a related field.
Six or more years of experience in a hands-on technical security role.
Offensive Security Certified Professional (OSCP), GIAC Exploit Researcher and Advanced Penetration Tester (GXPN), CompTIA PenTest+, Certified Ethical Hacker (CEH), or a similar technical security certification.

Responsibilities

Identify and validate network vulnerabilities using automated tools and manual testing.
Communicate identified vulnerabilities clearly to system owners and support vulnerability management.
Partner with system owners during remediation and retest vulnerabilities to confirm resolution.
Maintain automated Red Team infrastructure for adversary simulation, repeatable security testing, and Security Operations workflows.
Work with the supervisor to develop and execute detailed Red Team engagement plans targeting specific MITRE ATT&CK vectors.
Identify security weaknesses and validate the effectiveness of existing security controls.
Partner with Application Development teams to test applications and provide feedback throughout development.
Help teams deploy secure applications and strengthen the organization’s overall security posture.
Provide technical expertise to the Cybersecurity Incident Response Team during cybersecurity incidents, as needed.