Full Job Description
About the Senior Red Team Analyst Position
The Senior Red Team Analyst plays a critical role in strengthening Colonial Pipeline's cybersecurity posture by proactively identifying vulnerabilities, emulating real-world threats, and conducting adversary simulation exercises. In this role, you will help enhance cybersecurity defenses, collaborate across teams to address risk, and validate the effectiveness of security controls through rigorous testing.
Leveraging your knowledge of the MITRE ATT&CK framework and advanced technical expertise, you will help ensure the organization is prepared to respond to evolving cyber threats while supporting a culture of continuous improvement in security practices.
What You Get to Do
• Identify and validate network vulnerabilities using a combination of automated tools and manual testing.
• Support vulnerability management by clearly communicating identified vulnerabilities to system owners.
• Partner with system owners throughout the remediation process and retest vulnerabilities to confirm they have been resolved.
• Maintain automated Red Team infrastructure used for adversary simulation, repeatable security testing, and Security Operations workflows.
• Work with the supervisor to develop and execute detailed Red Team engagement plans designed to test specific MITRE ATT&CK vectors.
• Identify areas of security weakness and validate the effectiveness of existing security controls.
• Partner with Application Development teams to test applications and provide feedback throughout the development process.
• Help teams deploy secure applications and strengthen the organization's overall security posture.
• Provide technical expertise to the Cybersecurity Incident Response Team during cybersecurity incidents, as needed.
What You Bring to the Table
• Bachelor's degree is preferred but will consider a combination of education and years' experience
• At least 4 years of experience working in a hands-on technical security role with a bachelor's degree; or at least five years of experience in an IT-focused role with security responsibilities.
• Experience in cybersecurity, network security, threat analysis, ICS security, infrastructure management, patch management, data analysis, reporting, vulnerability assessment, communication, and security analysis.
• Advanced knowledge of offensive security practices.
• Advanced documentation skills.
• A technical security certification.
Skills That Set You Apart
• Bachelor's degree in Computer and Information Science, Cybersecurity, or a related field.
• Six or more years of experience in a hands-on technical security role.
• Offensive Security Certified Professional (OSCP), GIAC Exploit Researcher and Advanced Penetration Tester (GXPN), CompTIA PenTest+, Certified Ethical Hacker (CEH), or a similar technical security certification.
Advantages of Working at Colonial Pipeline Company
• Getting to work for a company that helps to meet our country's energy needs and keeps us moving!
• Team members who care about each other while accomplishing remarkable things.
• Highly competitive benefits - Check out Colonial's Total Rewards.
Are you up to the challenge? What are you waiting for? Apply today!
