Senior Penetration Tester - Offensive Security Lead

Dominion Energy; Northern (KY); Hybrid; USD 102,000 - 133,000; Full time

Benefits offered by this job

Health benefits

401k with matching

Vacation and paid holidays

Tuition reimbursement

Bonus eligibility

Sick leave

Job summary

Dominion Energy is seeking a Senior Cyber Security Analyst focused on penetration testing to identify exploitable weaknesses across applications, networks, cloud, and OT environments. You will plan engagements, perform hands‑on testing, and produce clear, actionable remediation guidance for technical and non‑technical audiences.

The ideal candidate has 5+ years of hands‑on security testing experience, strong report writing, and communication skills.

Qualifications

• Five years of hands-on experience with systems, networks, cloud, OT/ICS environments, or related enterprise infrastructure.
• A Master’s degree will count as one year of experience; partial years will be rounded up.
• Ability to plan, scope, execute, and document penetration tests or offensive security assessments.
• Excellent verbal and written communication, including presenting security findings to diverse audiences.
• Ethical testing within authorized scope while considering business operations and safety.

Responsibilities

• Plan, scope, and execute authorized penetration tests and offensive security assessments.
• Identify and validate vulnerabilities, attack paths, and control gaps.
• Assess web apps, APIs, networks, cloud, identity platforms, and related technologies.
• Support OT/ICS/SCADA or critical infrastructure assessments when applicable.
• Prepare reports describing technical evidence, risk, impact, and remediation recommendations.
• Present findings to technical teams, system owners, and management.
• Collaborate with technology owners to prioritize findings and validate fixes.
• Coordinate testing activities with peers and share knowledge.
• Research emerging vulnerabilities and offensive security techniques.
• Conduct testing ethically with minimal business disruption.

Skills

Penetration testing

OT/ICS security

Risk communication

Team collaboration

Report writing

Ethical hacking

Education

Bachelor

Master’s degree counted as experience

Tools

OSCP

CISSP

OSEP

PNPT

GPEN

GXPN

GWAPT

GCIH

GCFA

GICSP

Job description

Dominion Energy is seeking a Senior Cyber Security Analyst focused on penetration testing to identify exploitable weaknesses across applications, networks, cloud, and OT environments. You will plan engagements, perform hands‑on testing, and produce clear, actionable remediation guidance for technical and non‑technical audiences.

The ideal candidate has 5+ years of hands‑on security testing experience, strong report writing, and communication skills.