Offensive Security Analyst II - Threat Emulation & Pentesting

H-E-B; San Antonio (TX); Hybrid; USD 110,000 - 140,000; Full time

Job summary

H-E-B is seeking an Offensive Security Analyst II to lead hands-on testing of digital assets, systems, and processes. You will perform network, web, and mobile application assessments and contribute to remediation planning in a hybrid Austin or San Antonio environment.

You will develop and automate offensive testing labs, stay current with threats, and produce clear reports for technical and executive audiences.

Qualifications

• 3+ years direct experience in penetration testing (web application, host, network)
• Experience with attack surfaces in web technologies, networks, microservices/containers, and OSes
• Proficient with security testing tools: Kali Linux, Metasploit, Burp Suite, Cobalt Strike, Nessus, WebInspect, IDA Pro, Wireshark
• Scripting/development experience (e.g., Bash, PowerShell, Python, Perl, Ruby, PHP, C/C++, C#, Java)
• Experience with Windows, Linux and cloud environment testing
• Knowledge of security standards, access control, hardening, auditing, and incident handling
• Strong problem-solving, detail orientation, and communication skills
• Experience with APT threats, cyber threat emulation, and threat research
• Knowledge of testing mobile/native/web apps and distributed databases

Responsibilities

• Identify and validate vulnerabilities via penetration testing (web, host, network)
• Validate security control effectiveness with purple team testing
• Write and present finding reports to technical and executive audiences
• Support remediation efforts for security findings
• Coordinate with Compliance, Internal Audit, and external vendors to plan and execute offensive testing
• Design, develop, and automate lab environments (Windows, Linux, cloud) to support testing
• Stay up-to-date on threats and threat emulation methodologies

Skills

Penetration testing

Web testing

Host testing

Network testing

Exploit development

Fuzzing

Countermeasures design

Education

Bachelor's degree

One or more professional security certifications (CISA, CEH, GIAC, GSEC, OSCP or CISSP)

Tools

Kali Linux

Metasploit

Burp Suite

Cobalt Strike

Nessus

Web Inspect

IDA Pro

Wireshark

Job description

H-E-B is seeking an Offensive Security Analyst II to lead hands-on testing of digital assets, systems, and processes. You will perform network, web, and mobile application assessments and contribute to remediation planning in a hybrid Austin or San Antonio environment.

You will develop and automate offensive testing labs, stay current with threats, and produce clear reports for technical and executive audiences.