Cyber Offense Analyst — Hybrid, Impactful Security

Ascot Group; Chicago (IL); Hybrid; USD 90,000 - 100,000; Full time

Job summary

Ascot Group is seeking a Cyber Offense Analyst to join our Cybersecurity team in a hybrid office setting. This hands-on role focuses on identifying and mitigating offensive security risks across global environments, working with AI-enabled tools and security platforms to deliver measurable improvements.

You will collaborate with technical and non-technical stakeholders, perform vulnerability assessments, support penetration testing, and help mature our offensive security program in line with

Qualifications

• Bachelor’s degree or higher in Computer Science, Application Development, Software Engineering, or a related discipline.
• Minimum 3 years of experience in application or network security role.
• Excellent analytical skills and keen attention to detail for identifying and addressing security vulnerabilities.
• Experience with offensive security and exposure‑management tools such as Burp Suite, Metasploit, Nmap, Wireshark, Tenable, automated penetration‑testing platforms, attack‑path‑management solutions, adversary‑emulation frameworks, application security testing platforms, and equivalent commercial or open‑source technologies.
• Experience using AI‑assisted security tooling to support vulnerability discovery, source‑code analysis, attack‑path identification, penetration testing, threat research, and remediation validation.
• Working knowledge of security risks affecting generative AI and machine‑learning systems, including prompt injection, sensitive‑data disclosure, insecure tool or plugin use, model and supply‑chain risks, excessive agency, and unsafe output handling.

Responsibilities

• Perform cyber offense functions including vulnerability scanning, coordination of penetration testing activities, overseeing remediation of vulnerabilities, continuous monitoring, application security testing, and process rollout and management. The scope of work is global covering people, process and technology across Ascot Group.
• Assist in delivering a comprehensive offensive security strategy including identifying vulnerabilities, weaknesses and exposures in the organization’s environment, systems and applications.
• Assist in implementing best in class solutions and tooling that will help achieve the cyber offense strategic objectives.
• Manage vulnerability detection, coordinate patch management activities, and manage the application security program by supporting relevant processes and continuous monitoring.
• Support penetration testing, purple and red team exercises with external and internal reviews of the environment by running, managing, and supporting remediation of those assessments.
• Coordinate penetration testing (ethical hacking) activities and/or perform them to pinpoint vulnerabilities and consult on action plans for remediation that considers industry benchmark SLAs, asset criticality and severity rating of the vulnerabilities.
• Integrate application security best practices into the development processes to facilitate a secure system development life cycle.
• Leverage vulnerability databases, tooling, intelligence sources, and reports to build metrics as defined by leadership to identify the risks and tracking of risk reduction in the cyber offense space.
• Research new tactics, techniques and procedures in public and closed forums and communicate those with security leadership.
• Work with the cybersecurity resilience and defense team to collaborate on the presence of indicators of compromise (IOC’s) within or relevant to the environment along with determining the relevant corrective action.
• Communicate and collaborate with technical and non-technical functions across the company and vendors to share, receive, and interpret various cyber threats, vulnerabilities, and risks related to cyber offense.
• Embody The Ascot Way in daily interactions with colleagues, fostering engagement, development, collaboration, inclusivity, individual accountability, and a shared commitment to finding a better way.

Skills

Analytical skills

Detail oriented

AI security tooling

Education

Bachelor’s degree in CS/SE

Tools

Burp Suite

Metasploit

Nmap

Wireshark

Tenable

Adversary‑emulation frameworks

Application security testing platforms

Job description

Ascot Group is seeking a Cyber Offense Analyst to join our Cybersecurity team in a hybrid office setting. This hands-on role focuses on identifying and mitigating offensive security risks across global environments, working with AI-enabled tools and security platforms to deliver measurable improvements.

You will collaborate with technical and non-technical stakeholders, perform vulnerability assessments, support penetration testing, and help mature our offensive security program in line with