Offensive Security Analyst, Senior Specialist

Offensive Security Analyst, Senior Specialist

Apply (

locations

Dallas/Ft. Worth, TX

time type

Full time

posted on

Posted 5 Days Ago

time left to apply

End Date: June 24, 2026 (8 days left to apply)

job requisition id

179129

We are seeking a talentedOffensive Security Analystto join our team of ethical hackers. In this mid-level role, you will be anintegral part of our red teaming and penetration testing efforts, using your technical expertise tofind and exploit vulnerabilitiesacross web applications, networks, cloud platforms, and critical systems. By thinking like an attacker, you will help us identify weaknessesbefore real adversaries do, and work with cross-functional partners to fix them. This is a hands-on role focused on traditional offensive security methods – you’ll use well-known and custom tools to emulate sophisticated threat actors,improve our security posture, andreduce risk.

Key Responsibilities:

• Red Team Operations & Adversary Simulation:Participate infull-scope red team engagements, contributing across the kill-chain (reconnaissance, exploitation, lateral movement, data exfiltration, etc.). Occasionallylead targeted adversary simulationsat moderate scope (e.g., a spear-phishing campaign or an endpoint compromise scenario, using phishing or malware implants). Emulatereal threat actor TTPsaligned with frameworks like MITRE ATT&CK to test our detection and response capabilities.

• Collaborative Remediation & Purple Team Support:Work closely withdefensive teams– such as developers, system engineers, and security operations – to ensure discovered issues areunderstood and remediatedeffectively. Provide actionable technical guidance to fix vulnerabilities (e.g., code remediation suggestions for development teams). Supportpurple team exercisesby sharing attacker perspective knowledge and helping defensive teams validate alerts and improve detection rules.

• Reporting & Communication:Document each engagement thoroughly, producingclear and detailed penetration test reportsthat explain findings, their severity, and recommended mitigations. Communicate technical details to both technical and non-technical audiences; for instance, explaining a complex exploit in layman’s terms to business stakeholders or summarizing red team outcomes in executive readouts.

• Continuous Learning & Tooling:Continuously research emerging vulnerabilities,new exploit techniques, and security trends in the offensive domain. Keep offensive toolkit sharp – use and refine tools like Burp Suite, OWASP ZAP, Metasploit, Kali Linux, etc., and create custom scripts (in Python, PowerShell, Bash, etc.) toautomate routine tasks or develop new exploits. Share knowledge with peers, helpmentor junior analysts, and contribute to the team’s playbooks and knowledge base.

• Technical Offensive Security Experience:5+ years of hands-onpenetration testing and/or red teamingexperience. Proven track record ofidentifying and exploiting vulnerabilitiesacross web applications (deep knowledge ofOWASP Top 10), networks, and cloud services. Familiarity withshell scripting and programming (Python, PowerShell, Bash)for exploit development and automation. Strong understanding of network protocols, operating systems, identity management, and security architecture.

• Adversary Mindset & Frameworks:Demonstrated ability tothink like an attackerto anticipate and craft creative exploitation scenarios. Familiarity with frameworks and methodologies likeMITRE ATT&CK, PTES (Penetration Testing Execution Standard), and relevant compliance standards (NIST, ISO), ensuring tests are realistic and comprehensive.

• Communication & Teamwork:Strong written and verbal communication skills to produce high-quality reports and articulate risk to stakeholders. Experience collaborating with defensive teams (security operations, appsec, IT engineering) to help them understand issues and prioritize fixes. A team-oriented approach: open to knowledge sharing, learning from others, and contributing positively to the team’s success.

Preferred Qualifications:

• Offensive security certifications such asOSCP, OSWE, OSWA, GPEN, GWAPT, or similar, demonstrating validated skills in penetration testing.

• Experience performingthreat modelingand incorporating attacker perspective into security design reviews.

• Familiarity withcloud platforms(AWS, Azure, GCP) and their specific security considerations.

• Knowledge of secure software development practices and experience working withDevSecOpsor CI/CD pipeline security.

• Red team operations exposureor small-scale adversary simulations (beyond standard pentesting), showing the ability to plan multi-phase attacks and operate stealthily.

• Active participation in the security community (e.g., CTFs, bug bounties, open-source contributions) demonstrating passion for offensive security.

Special Factors

Sponsorship

Vanguard is not offering visa sponsorship for this position.

About Vanguard

At Vanguard, we don't just have a mission—we're on a mission.

To work for the long-term financial wellbeing of our clients. To lead through product and services that transform our clients' lives. To learn and develop our skills as individuals and as a team. From Malvern to Melbourne, our mission drives us forward and inspires us to be our best.

How We Work

Vanguard has implemented a hybrid working model for the majority of our crew members, designed to capture the benefits of enhanced flexibility while enabling in-person learning, collaboration, and connection. We believe our mission-driven and highly collaborative culture is a critical enabler to support long-term client outcomes and enrich the employee experience.

Similar Jobs (5)

Adversarial AI Offensive Security Analyst

locations

3 Locations

time type

Full time

posted on

Posted 6 Days Ago

time left to apply

End Date: June 22, 2026 (6 days left to apply)

Senior Technical Risk Assurance Analyst - AI

locations

4 Locations

time type

Full time

posted on

Posted 5 Days Ago

Cloud Security Specialist (IAM & Cloud Controls)

locations

3 Locations

time type

Full time

posted on

Posted 27 Days Ago

time left to apply

End Date: June 30, 2026 (14 days left to apply)

View All 5 Jobs

About Us

Vanguard, one of the world's leading investment management companies, serves individual investors, institutions, employer-sponsored retirement plans, and financial professionals. We have a diverse and talented crew with a culture that promotes teamwork, along with an unwavering focus on serving our clients' best interests.

This website uses "cookies" to distinguish you from other users. A cookie is a small file of letters and numbers placed on your computer or device. This helps us to provide you with a good experience when you browse our website and also allows us to improve our site and services. The cookies are stored locally on your computer or mobile device. To accept cookies you can continue browsing as normal. Or you can go to ourPrivacy Policy ( to read more information and learn how to change your preferences.

Read More