Offensive Security Analyst

Vanguard

. Lead and execute penetration tests, adversary emulation exercises, and red team activities .

Posted 11/9/2026full-timeUnited StatesMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in offensive security practices, including penetration testing, red teaming, and adversary emulation, while leveraging tools like Burp Suite and Metasploit. Proficient in scripting languages such as Python and PowerShell, with strong communication skills to present findings and recommendations effectively.

Highest-signal resume keywords

Penetration TestingRed Team OperationsMITRE ATT&CKPython ScriptingOffensive Security Certifications

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Penetration TestingAdversary EmulationSecurity AssessmentsAttack SimulationVulnerability IdentificationExploitation TechniquesCloud Security AssessmentScripting LanguagesThreat IntelligenceTechnical Reporting

Soft Skills

Strong Communication SkillsCollaborationTechnical Guidance

Tools & Technologies

Burp SuiteCobalt StrikeMetasploitNmapBloodHoundImpacketAWSAzureAutomation ToolsAI Security Tools

Certifications & Qualifications

OSCPCRTOPNPTOSEPGXPN

Industry Keywords

Offensive SecurityCybersecurityThreat-Led OperationsPurple Team EngagementsEmerging Technologies

Tech Stack

Tools & technologies

AWSAzureCloudCyber SecurityPython

About the role

Key responsibilities & impact

Lead and execute penetration tests, adversary emulation exercises, and red team activities
Assess web applications, APIs, cloud environments, identity platforms, infrastructure, and emerging technologies
Simulate realistic attacker behaviors to identify vulnerabilities, control weaknesses, and attack paths
Validate security controls through exploitation and proof-of-concept testing
Support threat-led operations aligned to organizational risk priorities
Develop and execute attack scenarios based on current threat intelligence and adversary tradecraft
Leverage MITRE ATT&CK to design realistic attack simulations
Research emerging attack techniques, vulnerabilities, and exploitation methods
Contribute to offensive security methodologies and testing procedures
Analyze findings and evaluate business and technical risk
Produce technical reports and executive-ready summaries
Present findings, recommendations, and remediation strategies to stakeholders
Track remediation efforts and validate corrective actions
Develop and maintain offensive security tooling, scripts, and testing frameworks
Automate repetitive testing activities and reporting processes
Contribute to OSFT operational capabilities and infrastructure
Support automation and AI innovation initiatives to improve testing effectiveness
Partner with engineering, application security, cyber defense, fraud, and technology teams
Participate in purple team activities and collaborative security validation efforts
Provide technical guidance to less experienced analysts
Contribute to capability development, testing standards, playbooks, and best practices
Support initiatives improving offensive security coverage, scale, and maturity
Maintain awareness of evolving threat landscapes and industry practices

Requirements

What you’ll need

3–5+ years of offensive security, penetration testing, red teaming, or related cybersecurity experience
Demonstrated experience conducting security assessments across web applications, infrastructure, cloud, and identity environments
Strong understanding of attacker methodologies, attack chains, and offensive tradecraft
Experience using Burp Suite, Cobalt Strike, Metasploit, Nmap, BloodHound, Impacket, or equivalent platforms
Working knowledge of MITRE ATT&CK and threat-informed security testing
Proficiency in Python, PowerShell, Bash, or similar scripting languages
Strong written and verbal communication skills
Experience conducting adversary emulation or red team operations within a large enterprise
Experience assessing AWS, Azure, or hybrid cloud environments
Experience participating in Purple Team engagements and detection validation exercises
Knowledge of AI security, adversarial AI testing, or emerging technology risk assessments
Offensive security certifications such as OSCP, CRTO, PNPT, OSEP, GXPN, or equivalent
Must not require visa sponsorship for this position

Benefits

Comp & perks

Hybrid working model
Enhanced flexibility
In-person learning, collaboration, and connection
Continuous learning and development opportunities
Knowledge-sharing initiatives
No visa sponsorship offered