Offensive Security Analyst II: Pen Test & Threat Emulation

H.E.B.; San Antonio (TX); Hybrid; USD 110,000 - 160,000; Full time

Job summary

H-E-B is seeking an Offensive Security Analyst II to perform hands-on planning and testing of digital assets, systems, and processes. The role is based in Austin or San Antonio, TX, with a hybrid work arrangement.

The ideal candidate has 3+ years of penetration testing experience, familiarity with web/mobile/app security, and strong scripting skills. You will work with Windows, Linux, and cloud environments and interact with various stakeholders to drive remediation.

Qualifications

• 3+ years direct experience in penetration testing (web/app/host/network)
• Knowledge of attack surfaces in web tech, networks, microservices/containers, OS
• Experience with tools like Kali Linux, Metasploit, Burp Suite, Cobalt Strike, Nessus, Wireshark

Responsibilities

• Identify and validate vulnerabilities via network, web/mobile testing, code reviews, and network segmentation testing.
• Perform purple team testing to validate security controls using manual and automated methods.
• Draft and present findings to technical and executive audiences to support remediation.
• Coordinate with Compliance, Internal Audit and vendors to scope, schedule, and execute offensive testing.
• Develop and document Windows, Linux, lab, cloud environments to support offensive simulations.

Skills

Penetration testing

Exploit development

Fuzzing

Scripting languages

Cyber threat emulation

Education

Bachelor's degree

Tools

Kali Linux

Metasploit

Burp Suite

Cobalt Strike

Nessus

Wireshark

IDA Pro

Job description

H-E-B is seeking an Offensive Security Analyst II to perform hands-on planning and testing of digital assets, systems, and processes. The role is based in Austin or San Antonio, TX, with a hybrid work arrangement.

The ideal candidate has 3+ years of penetration testing experience, familiarity with web/mobile/app security, and strong scripting skills. You will work with Windows, Linux, and cloud environments and interact with various stakeholders to drive remediation.