Security Analyst III

Job Summary This role serves as a senior offensive security analyst focused on internal red teaming, attack simulation, and threat and detection engineering within the Security Assurance team. The analyst ensures our systems are evaluated against emerging adversary tactics through continuous validation and threat‑informed operations. Essential Functions And Responsibilities Lead adversary simulations, purple‑team exercises, and red‑team engagements based on real‑world threat actor tactics, techniques, and procedures (TTPs). Partner with Security Operations Center, Engineering, and IT teams to translate offensive security findings into actionable detection content, control improvements, and architectural enhancements. Develop and validate threat detections based on emerging adversary tradecraft using SIEM, EDR, and security analytics platforms. Measure detection coverage through threat hunting and automated validation. Perform penetration testing, security architecture reviews, and application security assessments. Develop custom tooling, automation, attack emulation capabilities, and proof‑of‑concept exploits to emulate advanced adversary behaviour and assess defensive effectiveness. Experience with Operational Technology (OT) environments, industrial control systems, and associated protocols and security technologies is preferred. Monitor emerging adversary behaviours and assess organizational exposure through continuous validation of internal and external attack surfaces. Serve as a technical leader within the Security Assurance team by mentoring team members, driving offensive security strategy, and communicating risk and remediation recommendations to technical and executive stakeholders. Education Bachelor's Degree in information technology, related field, or an equivalent combination of formal education and the following job‑related experience: 6+ years in information security, 3+ years with significant duties in offensive security, read‑team penetration, or detection engineering, and experience in a regulated sector. Familiarity with gas/utilities business processes is a plus. Licenses And Certifications (Preferred But Not Required) OSCP – OffSec Certified Professional or other relevant OffSec certifications GPEN – GAIC Penetration Tester or other relevant GIAC certifications CISSP – Certified Information Systems Security Professional Physical Demands Sedentary work – may involve walking or standing for brief periods. Weight lifting up to 10 pounds occasionally. Standing, walking, and bending occasionally. Reaching and handling tasks constantly, requiring manual and finger dexterity. Visual, hearing, and speaking demands vary from constant to frequent. Working Conditions Well‑lighted, climate‑controlled indoor environment. Frequent repetitive motion. Computer monitor usage. Travel Travel to other locations required. Driving May require assignment of a company vehicle and applicable driver’s license. Expected Salary Range $143,000.00 – $215,000.00 ONEOK is an equal opportunity employer committed to diversity and inclusion. All qualified applicants will receive consideration for employment without regard to race, color, sex, pregnancy, sexual orientation, age, religion, creed, national origin, gender identity, disability, military/veteran status, genetic information or any other categories protected by applicable law. The job description is not intended to be a complete list of all responsibilities, duties or skills required for the job and is subject to review and change at any time, with or without notice, in accordance with the needs of ONEOK. ONEOK is committed to making our workplace accessible to individuals with disabilities and will provide reasonable accommodations, upon request, for individuals to participate in the application and hiring process. To request an accommodation email View email address on click.appcast.io or call View phone number on click.appcast.io. #J-18808-Ljbffr ONEOK