Security Analyst III

ONEOK; Tulsa (OK); On-site; USD 143,000 - 215,000; Full time

Job summary

ONEOK in Tulsa, OK seeks a Senior Offensive Security Analyst to lead adversary simulations, threat detection development, and continuous validation of security measures. The role focuses on internal red teaming, attack simulation, and threat-informed operations within the Security Assurance team.

Responsibilities include mentoring the team, driving offensive security strategy, and communicating risk to technical and executive stakeholders.

Qualifications

• 6+ years in information security
• 3+ years with significant duties in offensive security, read-team penetration, or detection engineering
• Experience in a regulated sector; familiarity with gas/utilities business processes is a plus

Responsibilities

• Lead adversary simulations, purple-team exercises, and red-team engagements based on real-world TTPs
• Partner with SOC, Engineering, and IT to translate offensive security findings into actionable detection content and architectural improvements
• Develop and validate threat detections using SIEM, EDR, and security analytics platforms; measure coverage via threat hunting and automated validation
• Perform penetration testing, security architecture reviews, and application security assessments
• Develop custom tooling, automation, attack emulation capabilities, and PoC exploits to emulate adversary behavior
• Mentor team members and communicate risk and remediation recommendations to stakeholders

Education

Bachelor's Degree in information technology, related field, or equivalent combination of formal education and job-related experience

Job description

Job Summary

This role serves as a senior offensive security analyst focused on internal red teaming, attack simulation, and threat and detection engineering within the Security Assurance team. The analyst ensures our systems are evaluated against emerging adversary tactics through continuous validation and threat‑informed operations.

Essential Functions And Responsibilities

• Lead adversary simulations, purple‑team exercises, and red‑team engagements based on real‑world threat actor tactics, techniques, and procedures (TTPs).
• Partner with Security Operations Center, Engineering, and IT teams to translate offensive security findings into actionable detection content, control improvements, and architectural enhancements.
• Develop and validate threat detections based on emerging adversary tradecraft using SIEM, EDR, and security analytics platforms. Measure detection coverage through threat hunting and automated validation.
• Perform penetration testing, security architecture reviews, and application security assessments.
• Develop custom tooling, automation, attack emulation capabilities, and proof‑of‑concept exploits to emulate advanced adversary behaviour and assess defensive effectiveness.
• Experience with Operational Technology (OT) environments, industrial control systems, and associated protocols and security technologies is preferred.
• Monitor emerging adversary behaviours and assess organizational exposure through continuous validation of internal and external attack surfaces.
• Serve as a technical leader within the Security Assurance team by mentoring team members, driving offensive security strategy, and communicating risk and remediation recommendations to technical and executive stakeholders.

Education

• Bachelor's Degree in information technology, related field, or an equivalent combination of formal education and the following job‑related experience: 6+ years in information security, 3+ years with significant duties in offensive security, read‑team penetration, or detection engineering, and experience in a regulated sector. Familiarity with gas/utilities business processes is a plus.

Licenses And Certifications (Preferred But Not Required)

• OSCP – OffSec Certified Professional or other relevant OffSec certifications
• GPEN – GAIC Penetration Tester or other relevant GIAC certifications
• CISSP – Certified Information Systems Security Professional

Physical Demands

• Sedentary work – may involve walking or standing for brief periods.
• Weight lifting up to 10 pounds occasionally.
• Standing, walking, and bending occasionally.
• Reaching and handling tasks constantly, requiring manual and finger dexterity.
• Visual, hearing, and speaking demands vary from constant to frequent.

Working Conditions

• Well‑lighted, climate‑controlled indoor environment.
• Frequent repetitive motion.
• Computer monitor usage.

Travel

• Travel to other locations required.

Driving

• May require assignment of a company vehicle and applicable driver’s license.

Expected Salary Range

$143,000.00 – $215,000.00

ONEOK is an equal opportunity employer committed to diversity and inclusion. All qualified applicants will receive consideration for employment without regard to race, color, sex, pregnancy, sexual orientation, age, religion, creed, national origin, gender identity, disability, military/veteran status, genetic information or any other categories protected by applicable law.

The job description is not intended to be a complete list of all responsibilities, duties or skills required for the job and is subject to review and change at any time, with or without notice, in accordance with the needs of ONEOK.

ONEOK is committed to making our workplace accessible to individuals with disabilities and will provide reasonable accommodations, upon request, for individuals to participate in the application and hiring process. To request an accommodation email [e-mail] or call 1‑855‑663‑6547.