Security Analyst III

ONEOK; Dallas (TX); On-site; USD 143,000 - 215,000; Full time

Job summary

ONEOK is seeking a Senior Offensive Security Analyst to lead red-team operations, simulate adversary tactics, and drive threat-informed defense strategies within the Security Assurance team. The role emphasizes translating offensive findings into detectable controls and architectural improvements across SOC, Engineering, and IT functions.

The candidate will develop and validate detections, conduct penetration testing, and mentor team members while communicating risk to executives.

Qualifications

• Bachelor's Degree in information technology or related field with 6+ years in information security, 3+ years in offensive security or read-team penetration, and experience in a regulated sector.

Responsibilities

• Lead adversary simulations, purple-team exercises, and red-team engagements based on real-world TTPs.
• Partner with SOC, Engineering, and IT to translate findings into detection content, controls, and architecture improvements.
• Develop and validate threat detections using SIEM, EDR, and analytics platforms; measure coverage via threat hunting and automated validation.
• Perform penetration testing, security architecture reviews, and application security assessments.
• Develop custom tooling and proof-of-concept exploits to emulate adversary behavior and test defenses.
• Mentor team members and communicate risk and remediation to technical and executive stakeholders.

Skills

Offensive security

Penetration testing

Threat detection

Security architecture

Team mentoring

Executive communication

Education

Bachelor's Degree in information technology

Tools

SIEM

EDR

Security analytics platforms

Job description

Job Summary

This role serves as a senior offensive security analyst focused on internal red teaming, attack simulation, and threat and detection engineering within the Security Assurance team. The analyst ensures our systems are evaluated against emerging adversary tactics through continuous validation and threat‑informed operations.

Essential Functions And Responsibilities

• Lead adversary simulations, purple‑team exercises, and red‑team engagements based on real‑world threat actor tactics, techniques, and procedures (TTPs).
• Partner with Security Operations Center, Engineering, and IT teams to translate offensive security findings into actionable detection content, control improvements, and architectural enhancements.
• Develop and validate threat detections based on emerging adversary tradecraft using SIEM, EDR, and security analytics platforms. Measure detection coverage through threat hunting and automated validation.
• Perform penetration testing, security architecture reviews, and application security assessments.
• Develop custom tooling, automation, attack emulation capabilities, and proof‑of‑concept exploits to emulate advanced adversary behaviour and assess defensive effectiveness.
• Experience with Operational Technology (OT) environments, industrial control systems, and associated protocols and security technologies is preferred.
• Monitor emerging adversary behaviours and assess organizational exposure through continuous validation of internal and external attack surfaces.
• Serve as a technical leader within the Security Assurance team by mentoring team members, driving offensive security strategy, and communicating risk and remediation recommendations to technical and executive stakeholders.

Education

• Bachelor's Degree in information technology, related field, or an equivalent combination of formal education and the following job‑related experience: 6+ years in information security, 3+ years with significant duties in offensive security, read‑team penetration, or detection engineering, and experience in a regulated sector. Familiarity with gas/utilities business processes is a plus.

Licenses And Certifications (Preferred But Not Required)

• OSCP – OffSec Certified Professional or other relevant OffSec certifications
• GPEN – GAIC Penetration Tester or other relevant GIAC certifications
• CISSP – Certified Information Systems Security Professional

Physical Demands

• Sedentary work – may involve walking or standing for brief periods.
• Weight lifting up to 10 pounds occasionally.
• Standing, walking, and bending occasionally.
• Reaching and handling tasks constantly, requiring manual and finger dexterity.
• Visual, hearing, and speaking demands vary from constant to frequent.

Working Conditions

• Well‑lighted, climate‑controlled indoor environment.
• Frequent repetitive motion.
• Computer monitor usage.

Travel

• Travel to other locations required.

Driving

• May require assignment of a company vehicle and applicable driver’s license.

Expected Salary Range

$143,000.00 – $215,000.00

ONEOK is an equal opportunity employer committed to diversity and inclusion. All qualified applicants will receive consideration for employment without regard to race, color, sex, pregnancy, sexual orientation, age, religion, creed, national origin, gender identity, disability, military/veteran status, genetic information or any other categories protected by applicable law.

The job description is not intended to be a complete list of all responsibilities, duties or skills required for the job and is subject to review and change at any time, with or without notice, in accordance with the needs of ONEOK.

ONEOK is committed to making our workplace accessible to individuals with disabilities and will provide reasonable accommodations, upon request, for individuals to participate in the application and hiring process. To request an accommodation email [e-mail] or call 1‑855‑663‑6547.