Offensive Security Senior Analyst

S&P Global

Confirmed live yesterday High trust
Closes in 5 days

Quick summary

Work type
On-site
Location
Boulder, CODallas, TXRaleigh, NC
Salary
$120,000–$155,000 / yr
Posted
3 days ago
Freshness
Confirmed live yesterday
Closes
Nov 11, 2026 (soon)

Market check

Salary context

Below market

How this pay compares to similar roles

Similar $164k
This role $138k
$111k $207k
below market most similar roles pay here above market

This role pays less than 74% of similar roles. Most pay $135,000–$192,000 — the blue band above. At the midpoint, this role pays about $138k versus about $164k for comparable roles.

Based on 240 similar postings.

Employer

About S&P Global

S&P Global delivers Essential Intelligence® that shapes decision making. We provide the world’s leading organizations with the right data, connected technologies and expertise they need to move ahead.

S&P Global currently has 36 open roles on FindRole.

Listed pay typically runs $148,491–$200,000 across 35 roles with salary data.

Most-posted roles

View all roles at S&P Global

At a glance

TL;DR · Offensive Security Senior Analyst

The Offensive Security Senior Analyst joins the Offensive Security team to strengthen cyber resiliency through red and collaborative purple team operations. This role involves conducting red team engagements to simulate advanced persistent threats, executing purple team exercises to enhance detection and prevention, and designing breach and attack simulations to identify security gaps. You will develop custom attack tools and methodologies to test infrastructure and applications against emerging threat landscapes. Key technical requirements include proficiency with Red Teaming frameworks, network protocols, Windows, Linux, Mac, Entra/AD, and cloud platforms like AWS, Azure, or GCP. You must possess scripting skills in Python, PowerShell, Bash, or JavaScript. The role requires knowledge of the MITRE ATT&CK framework, Cyber Threat Intelligence, and leveraging Artificial Intelligence throughout the attack chain to provide actionable remediation guidance.

What you'll do

  • Conduct red team engagements to simulate advanced persistent threats against infrastructure and applications.
  • Execute purple team exercises to enhance detection, prevention, and incident response capabilities.
  • Design and conduct breach and attack simulations to identify security gaps and validate controls.
  • Develop custom attack tools and methodologies to test resilience against emerging threats.
  • Provide actionable remediation guidance and security recommendations to development and infrastructure teams.
  • Emulate threat actor tactics, techniques, and procedures using the MITRE ATT&CK framework.
  • Leverage artificial intelligence throughout all phases of the cyber attack chain.

What we're looking for

  • 5+ years of hands-on experience in offensive security, purple teaming, or red team operations.
  • Excellent communication skills to translate technical concepts to non-technical individuals.
  • Proficiency with Red Teaming frameworks and tools, both commercial and open-source.
  • Strong knowledge of network protocols, operating systems, Entra/AD, cloud platforms (AWS, Azure, GCP), databases, and web applications.
  • Experience with scripting and programming languages such as Python, PowerShell, Bash, or JavaScript for automation and tool development.
  • Experience leveraging Artificial Intelligence through all phases of the attack chain.
  • Familiarity with Cyber Threat Intelligence, Threat Actors, TTPs, and the MITRE ATT&CK framework.
  • Relevant security certifications such as GIAC RTP, RTO, OSCP, GPEN, or equivalent industry-recognized credentials.

More like this

Similar roles

Senior Offensive Security Engineer

Robinhood

Bellevue, WA +3 51 days ago $187,000–$220,000
Penetration Testing Threat Modeling Python Go JavaScript Kubernetes Docker AWS GCP Linux MacOS DNS TCP/IP IDS/IPS Packet Capture Network Analysis EDR JIRA GitHub
6+ yrs exp Hybrid

Senior Offensive Security Engineer

Anduril Industries

Washington, DC +1 29 days ago $183,000–$243,000
Offensive Security Red Teaming Penetration Testing Reverse Engineering Firmware Analysis Kubernetes AWS GCP Azure Source Code Review RF IoT OT/ICS LLMs Social Engineering
5+ yrs exp

Senior Offensive Security Engineer

Anduril Industries

Costa Mesa, CA +1 29 days ago $183,000–$243,000
Offensive Security Red Teaming Penetration Testing Reverse Engineering Firmware Analysis Kubernetes AWS GCP Azure Source Code Review RF IoT OT/ICS LLMs Social Engineering Web Applications
5+ yrs exp

Security Operations Center Analyst, Senior

Booz Allen Hamilton

Fort Meade, MD 66 days ago
Microsoft Sentinel KQL Python SIEM Incident Response Threat Hunting Detection Engineering Malware Analysis Digital Forensics Cloud Security Networking MITRE ATT&CK NIST SP 800-53 NIST SP 800-82 Operational Technology Red Canary
8+ yrs exp

Senior Analyst Information Security Operations

JLL (Jones Lang LaSalle)

Remote (Chicago, IL) 10 days ago
DLP CASB Data Analytics Computer Forensics Data Security Controls Incident Response Automation Information Security Data Protection
3+ yrs exp Remote

Senior Security Analyst, Security Risk Management

Plaid

Remote (Raleigh) +2 25 days ago $124,000–$194,000
Security Risk Assessment NIST SP 800-30 FAIR NIST 800-53 NIST CSF ISO 27001 SOC 2 FedRAMP Enterprise Risk Management IAM Software Supply Chain AI Automation
Remote