Senior Associate, Offensive Security

Pfizer

. Conduct offensive security testing, including penetration tests and adversary simulation exercises across on-premises, cloud, and hybrid environments .

Posted 11/12/2026full-timeUnited StatesSenior💰 $79,400 - $132,400 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in offensive security testing, including penetration testing and adversary simulation, with a strong understanding of attack techniques and enterprise security concepts. Proficient in documenting technical findings and collaborating with cross-functional teams to enhance security measures.

Highest-signal resume keywords

Penetration TestingOffensive SecurityMITRE ATT&CK FrameworkPython ProgrammingCISSP Certification

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Offensive Security TestingPenetration TestingVulnerability ResearchSecurity AssessmentsRed Team MethodologiesAdversary EmulationCloud SecurityNetwork SecurityIdentity SecurityTechnical Documentation

Soft Skills

CollaborationCommunicationProblem-SolvingAttention to DetailProcess-Driven Approach

Tools & Technologies

Offensive Security ToolingAutomation ToolsSecurity FrameworksIncident Response ToolsVulnerability Management Tools

Certifications & Qualifications

CISSPOSCPCRTOGPENGXPN

Industry Keywords

Pharmaceutical IndustryBiotech IndustryLife SciencesRegulated IndustriesSOC Teams

Tech Stack

Tools & technologies

CloudCyber SecurityPython

About the role

Key responsibilities & impact

Conduct offensive security testing, including penetration tests and adversary simulation exercises across on-premises, cloud, and hybrid environments
Support red team and purple team engagements by executing test plans, collecting evidence, and evaluating defensive control effectiveness
Identify, validate, and document security weaknesses with technical details, proof-of-concept evidence, and remediation recommendations
Translate offensive findings into actionable improvements for detection, engineering, and remediation teams
Map observed techniques to common attacker behaviors and highlight realistic attack paths
Maintain accurate, complete, and ethical security testing reports
Improve offensive security tooling, automation, repeatable test methods, and playbooks
Collaborate with detection, incident response, vulnerability management, infrastructure, and cloud teams to coordinate testing and minimize disruption
Escalate complex technical issues, high-risk findings, or unexpected conditions
Report to the Sr. Manager, Offensive Security

Requirements

What you’ll need

Bachelor's degree in Information Security, Computer Science, Engineering, or a related field with at least 2 years of experience in cybersecurity with hands-on focus in offensive security, penetration testing, or vulnerability research; OR a master's degree with more than 0+ years of experience; OR an associate's degree with 6 years of experience; OR a high school diploma (or equivalent) with 8 years of relevant experience
Practical experience executing penetration tests or security assessments, including reconnaissance, exploitation validation, and reporting
Strong understanding of common attack techniques and enterprise security concepts across identity, endpoints, networks, and cloud services
Ability to clearly document technical findings and communicate risk and remediation guidance to technical stakeholders
Working knowledge of at least one scripting/programming language commonly used for security work, such as Python, PowerShell, or Bash
Strong collaboration skills and ability to operate in a process-driven, highly regulated environment
Strong hands-on knowledge of red team and adversary emulation methodologies aligned with MITRE ATT&CK
Application, cloud, network, and identity penetration testing experience
Social engineering and phishing simulation experience where appropriate
Knowledge of offensive security tooling and frameworks
Experience in pharmaceutical, biotech, life sciences, or similarly regulated industries
Experience supporting offensive security testing in cloud or hybrid environments
Exposure to partnering with detection engineering or SOC teams
Relevant certifications such as CISSP, OSCP, CRTO, GPEN/GXPN, or similar offensive security credentials
Ability to work through a personal laptop computer or mobile device for extended periods
Travel as required by the business, less than 5% domestic and/or international
Must be able to work in an assigned Pfizer office 2-3 days per week, or as needed by the business
Requires permanent work authorization in the United States

Benefits

Comp & perks

401(k) plan with Pfizer Matching Contributions and an additional Pfizer Retirement Savings Contribution
Paid vacation, holiday and personal days
Paid caregiver/parental and medical leave
Medical, prescription drug, dental and vision coverage
Relocation assistance may be available based on business needs and/or eligibility
Participation in Pfizer’s Global Performance Plan with a bonus target of 7.5% of the base salary