Senior Analyst, Cybersecurity Red Team – Offensive Security/Penetration Testing

Jobtailor; Pennsylvania; On-site; USD 120,000 - 180,000; Full time

Job summary

Jobtailor in the United States (Pennsylvania) is seeking an experienced cybersecurity leader to develop and enforce security strategy. You will protect digital assets, lead incident response, and oversee vulnerability assessments and threat intelligence efforts.

The role requires deep knowledge of SIEM/EDR/DLP, Azure security stack, and IAM principles, with on-call responsibilities and potential for cloud compliance work.

Qualifications

• Bachelor’s degree or equivalent experience with 7+ years in cybersecurity
• Strong knowledge of attacker tactics, techniques, and procedures (TTPs)
• Experience with SIEM, SOAR, IDS/IPS, and endpoint detection tools
• Experience with Azure security stack and cloud compliance
• Ability to lead incident response and perform root cause analysis

Responsibilities

• Develop and enforce cybersecurity policy and strategy
• Protect organizational assets from cyber threats and attacks
• Select, deploy, monitor, and enhance cybersecurity technology
• Perform advanced security monitoring, incident response, and risk management
• Identify and track APTs and intrusions
• Lead cyber-intrusion investigations and forensic analysis
• Conduct vulnerability assessments and penetration testing
• Develop remediation plans and track security standards
• Respond to urgent issues on-call outside normal hours

Skills

Cybersecurity Strategy

Incident Response Leadership

Vulnerability Assessment

Threat Hunting

Forensic Analysis

Penetration Testing

Root Cause Analysis

IAM Principles

Attacker TTPs

Red Team Experience

Education

Bachelor’s Degree in a related field

7 years of related work experience in lieu of a degree

Tools

SIEM

EDR

DLP

Azure Security Stack

Threat Intelligence Platforms (TIPs)

SOAR

IDS/IPS

Job description

Responsibilities

• Develop and enforce cybersecurity policy and strategy
• Protect organizational digital assets from cyber threats and attacks
• Select, develop, deploy, monitor, maintain, and enhance cybersecurity technology
• Perform advanced security monitoring, incident response, and operational risk management
• Identify and track advanced persistent threats (APTs), anomalous activities, and potential intrusions
• Analyze trends in security alerts and events
• Monitor and analyze alerts from SIEM, EDR, DLP, and email threat detection platforms
• Detect anomalous activities, lateral movements, and persistence mechanisms
• Lead cyber-intrusion investigations and forensic analysis
• Conduct vulnerability assessments and penetration testing
• Develop remediation plans and track compliance with security standards
• Contribute to threat hunting and operationalize threat intelligence findings
• Respond to urgent issues outside regular working hours while on-call

Requirements

• Bachelor’s Degree in a related field, or High School Diploma/GED and 7 years of preferred work experience
• 5 years of related work experience
• 7 years of related work experience to be considered in lieu of a degree
• Knowledge of attacker tactics, techniques, and procedures (TTPs)
• Knowledge of threat intelligence platforms (TIPs)
• Familiarity with SIEM, SOAR, IDS/IPS, and endpoint detection tools
• Experience with Azure security stack
• Knowledge of IAM principles, including RBAC and least privilege
• Experience with compliance in cloud environments
• Ability to lead incident response efforts
• Ability to perform root cause analysis
• Ability to conduct forensic investigations
• Red Team (Offensive Security/Penetration Testing) experience
• CISSP certification listed
• CISM certification listed
• Ability to work on-call outside regular working hours
• Ability to lift and carry 25 lbs.; frequent sitting/standing and keyboard use

Core Competencies

Demonstrates expertise in developing and enforcing cybersecurity policies, conducting vulnerability assessments, and leading incident response efforts. Proficient in utilizing threat intelligence platforms and advanced security monitoring tools to protect digital assets and ensure compliance with security standards.

Highest-signal resume keywords

• Cybersecurity Policy Development
• Incident Response Leadership
• Vulnerability Assessment
• Threat Intelligence Analysis
• CISSP Certification

Hard Skills

• Cybersecurity Strategy
• Advanced Security Monitoring
• Forensic Analysis
• Penetration Testing
• Root Cause Analysis
• IAM Principles
• Threat Hunting
• Compliance in Cloud Environments
• Attacker Tactics, Techniques, and Procedures (TTPs)
• Red Team Experience

Soft Skills

• On-Call Availability
• Problem Solving

Certifications & Qualifications

• CISSP
• CISM

Industry Keywords

• Cyber Threats
• Operational Risk Management
• Compliance Standards
• Digital Asset Protection
• Anomalous Activities

Tools & Technologies

• SIEM
• EDR
• DLP
• Azure Security Stack
• Threat Intelligence Platforms (TIPs)
• SOAR
• IDS/IPS