Senior Red & Purple Team Security Analyst

S&P Global Inc.; Englewood (CO); On-site; USD 120,000 - 155,000; Full time

Benefits offered by this job

Health & Wellness

Flexible downtime

Continuous learning

Invest in your future

Family friendly perks

Beyond the basics

Job summary

S&P Global Inc. is seeking an experienced Offensive Security professional to lead red team engagements and purple team collaboration. You will design breach simulations, develop attack tools, and work with development and infrastructure teams to strengthen defenses.

Requirements include 5+ years in offensive security, strong scripting abilities, and deep knowledge of cloud, networks, and operating systems. GIAC/OSCP/GPEN or equivalent credentials are valued.

Qualifications

• 5+ years in offensive security, purple teaming or red team operations
• Ability to translate complex concepts to non‑technical stakeholders
• Proficiency with Red Teaming frameworks and tools (commercial/open source)
• Solid knowledge of networks, OS (Windows/Linux/macOS), Entra/AD, databases, web apps
• Experience with scripting for automation (Python/PowerShell/Bash/JavaScript)
• Experience with CTI and MITRE ATT&CK framework
• Security certifications like GIAC RTP/RTO/OSCP/GPEN or equivalent
• Ability to manage responsibilities independently in cross‑functional teams

Responsibilities

• Conduct red team engagements simulating real threats against S&P Global systems
• Run purple team exercises to improve detection, response and resilience
• Design and run breach/attack simulations to uncover security gaps
• Develop custom tools and methodologies to test security measures
• Partner with development and infra teams to provide remediation guidance

Skills

Communication

Offensive security

Purple/Red team ops

Threat modeling

CI/CD security integration

Python/PowerShell/Bash/JavaScript

MITRE ATT&CK knowledge

Independent work, cross‑functional

Education

GIAC RTP/RTO/OSCP/GPEN or equivalent

Tools

Red Teaming frameworks/tools

SIEM/EDR/IDS/IPS tools

Cloud platforms: AWS/Azure/GCP

Job description

S&P Global Inc. is seeking an experienced Offensive Security professional to lead red team engagements and purple team collaboration. You will design breach simulations, develop attack tools, and work with development and infrastructure teams to strengthen defenses.

Requirements include 5+ years in offensive security, strong scripting abilities, and deep knowledge of cloud, networks, and operating systems. GIAC/OSCP/GPEN or equivalent credentials are valued.