Senior Offensive Security Analyst | Red/Purple Team Expert

S&P Global; Raleigh (NC); In loco; USD 120.000 - 155.000; Tempo pieno

Vantaggi offerti da questo lavoro

Health insurance

Flexible time off

Continuous learning

RETIREMENT/401(k) matching

Employee discounts

Descrizione del lavoro

S&P Global is seeking an experienced Offensive Security professional to lead red and purple team activities, identifying and mitigating cyber threats across our infrastructure and applications. You will design realistic breach simulations, craft custom attack tools, and work closely with development and operations teams to deliver measurable security improvements.

The role requires 5+ years in offensive security, strong understanding of MITRE ATT&CK, cloud platforms, scripting, and security

Competenze

• Excellent communication skills, able to translate technical concepts to non-technical audiences.
• 5+ years of hands-on experience in offensive security, purple teaming or red team operations.
• Proficiency with Red Teaming frameworks and tools, both commercial and open-source.
• Strong knowledge of network protocols and operating systems (Windows, Linux, Mac); Entra/AD; cloud platforms (AWS, Azure or GCP); databases, middleware, email and web apps.
• Experience with scripting and programming languages such as Python, PowerShell, Bash, JavaScript, or similar for automation.
• Experience leveraging Artificial Intelligence through all attack phases.
• Familiarity with Cyber Threat Intelligence, Threat Actors, MITRE ATT&CK.
• Relevant security certifications such as GIAC RTP, RTO, OSCP, GPEN or equivalents.
• Ability to work independently and collaborate cross-functionally.

Mansioni

• Conduct red team engagements to simulate advanced threats against S&P Global's infrastructure and applications.
• Execute purple team exercises with defensive security teams to enhance detection, response, and resiliency.
• Design and conduct breach and attack simulations to identify gaps and improve controls.
• Develop custom attack tools and methodologies to stay ahead of threats.
• Partner with development and infrastructure teams to provide actionable remediation guidance.

Conoscenze

Offensive security

Red team

Purple team

Scripting

MITRE ATT&CK

Cyber Threat Intelligence

GIAC RTP/RTO/OSCP/GPEN

Cloud platforms (AWS/Azure/GCP)

Communication skills

Security certifications

Strumenti

Red Team frameworks

SIEM

EDR/NGFW/IDS/IPS/WAF

Descrizione del lavoro

S&P Global is seeking an experienced Offensive Security professional to lead red and purple team activities, identifying and mitigating cyber threats across our infrastructure and applications. You will design realistic breach simulations, craft custom attack tools, and work closely with development and operations teams to deliver measurable security improvements.

The role requires 5+ years in offensive security, strong understanding of MITRE ATT&CK, cloud platforms, scripting, and security