{"id":2592161,"url":"https://alion.io/job/ascot-group-cybersecurity-offense-analyst","title":"Cybersecurity Offense Analyst","company":{"id":1962322,"name":"Ascot Group","domain":"ascotgroup.com","url":"https://alion.io/company/ascotgroup-com","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Oracle","truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Houston, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":90000,"max":100000,"currency":"USD","period":"year","gross":null,"usd_annual":100000},"salary_estimate":null,"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CVE","optional":false},{"name":"CVSS","optional":false},{"name":"Metasploit","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"Nmap","optional":false},{"name":"OWASP","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Red Teaming","optional":false},{"name":"Wireshark","optional":false}],"status":"live","first_seen_at":"2026-10-07T20:11:32Z","employer_posted_date":"2026-10-07","last_verified_at":"2026-10-15T17:33:49Z","board_verified":true,"closed_at":null,"days_open":7,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":7},"description":"This is an opportunity to join Ascot Group - one of the world’s preeminent specialty risk underwriting organizations.\nDesigned as a modern-era company operating through an ecosystem of interconnected global operating platforms, we’re bound by a common mission and purpose: One Ascot. Our greatest strength is a talented team who flourishes in a collaborative, inclusive, and entrepreneurial culture, steeped in underwriting excellence, integrity, and a passion to find a better way, The Ascot Way.\nThe Ascot Way guides our people and our organization. Our underwriting platforms collaborate to find creative ways to deploy our capital in a true cross-product and cross-platform approach. These platforms work as one, deploying our capital creatively through our Client Centric, Risk Centric, and Technology Centric strategies.\nBuilt to be resilient, Ascot maximizes client financial security while delivering bespoke products and world class service - both pre- and post-claims. Ascot exists to solve our clients’ brightest tomorrow, through agility, collaboration, resilience, and discipline.\nAscot is embedding artificial intelligence (AI) and automation across the organisation to enhance decision-making, efficiency, and quality of outcomes. In this role, you will be expected to work confidently alongside AI-enabled tools, apply sound judgment when interpreting insights, and adapt as technology continues to evolve. We value curiosity, critical thinking, and a willingness to embrace change as part of how we work.\nJob Summary:\nAs part of Ascot’s Cybersecurity team, the Cyber Offense Analyst has a key role in helping deliver its cybersecurity strategic objectives. This individual will be instrumental in helping the program prepare and respond against the ever-changing threat actor’s tactics, techniques and procedures. This is a hands-on role where the successful candidate will be required to provide effective outcomes in determining weaknesses and threats specific to Ascot while also supporting the day-to-day processes and procedures. The job includes routine metrics and outcome measurements of the effectiveness of the cyber offense deliverables. This role will be in the office with a hybrid work schedule.\nResponsibilities:\nPerform cyber offense functions including vulnerability scanning, coordination of penetration testing activities, overseeing remediation of vulnerabilities, continuous monitoring, application security testing, and process rollout and management. The scope of work is global covering people, process and technology across Ascot Group. \nAssist in delivering a comprehensive offensive security strategy including identifying vulnerabilities, weaknesses and exposures in the organization’s environment, systems and applications.\n\nAssist in implementing best in class solutions and tooling that will help achieve the cyber offense strategic objectives.\n\nManage vulnerability detection, coordinate patch management activities, and manage the application security program by supporting relevant processes and continuous monitoring.\n\nSupport penetration testing, purple and red team exercises with external and internal reviews of the environment by running, managing, and supporting remediation of those assessments.\n\nCoordinate penetration testing (ethical hacking) activities and/or perform them to pinpoint vulnerabilities and consult on action plans for remediation that considers industry benchmark SLAs, asset criticality and severity rating of the vulnerabilities.\nIntegrate application security best practices into the development processes to facilitate a secure system development life cycle.\n\nLeverage vulnerability databases, tooling, intelligence sources, and reports to build metrics as defined by leadership to identify the risks and tracking of risk reduction in the cyber offense space.\n\nResearch new tactics, techniques and procedures in public and closed forums and communicate those with security leadership.\n\nWork with the cybersecurity resilience and defense team to collaborate on the presence of indicators of compromise (IOC’s) within or relevant to the environment along with determining the relevant corrective action.\n\nCommunicate and collaborate with technical and non-technical functions across the company and vendors to share, receive, and interpret various cyber threats, vulnerabilities, and risks related to cyber offense.\n\nEmbody The Ascot Way in daily interactions with colleagues, fostering engagement, development, collaboration, inclusivity, individual accountability, and a shared commitment to finding a better way.\nRequirements:\nBachelor’s degree or higher in Computer Science, Application Development, Software Engineering, or a related discipline.\n\nMinimum 3 years of experience in application or network security role.\n\nExcellent analytical skills and keen attention to detail for identifying and addressing security vulnerabilities.\n\nExperience with offensive security and exposure-management tools such as Burp Suite, Metasploit, Nmap, Wireshark, Tenable, automated penetration-testing platforms, attack-path-management solutions, adversary-emulation frameworks, application security testing platforms, and equivalent commercial or open-source technologies.\nExperience using AI-assisted security tooling to support vulnerability discovery, source-code analysis, attack-path identification, penetration testing, threat research, and remediation validation. \nWorking knowledge of security risks affecting generative AI and machine-learning systems, including prompt injection, sensitive-data disclosure, insecure tool or plugin use, model and supply-chain risks, excessive agency, and unsafe output handling. \nMust have a strong technical background to understand and provide consulting to application, infrastructure, and network teams.\n\nOSCP, PNPT, CEH or equivalent certifications are preferred.\n\nUnderstanding of OWASP, OSINT, CVSS/CVE, the MITRE ATT&CK framework and the software development lifecycle.\n\nExperience with successful cloud security and vulnerability processes, technologies, and techniques.\n\nKnowledge and experience rolling out and performing application security testing functions (SAST/SCA/DAST & Application Pen Tests)\n\nAbility to independently validate AI-generated findings, exploit recommendations, and remediation guidance before operational use. \nAbility to automate offensive workflows and integrate results with vulnerability-management or remediation systems using Python, PowerShell, Bash, APIs, or equivalent technologies.\n\nCompensation:\nActual base pay could vary and may be above or below the listed range based on factors including but not limited to experience, subject matter expertise, and skills. The base pay is just one component of Ascot’s total compensation package for employees. Other rewards may include an annual cash bonus, long-term incentives, and other forms of discretionary compensation awarded by the Company.\nThe annualized base pay range for this role is $90,000 - 100,000.\n**The base salary range listed is for New Jersey, Connecticut, Colorado, and Chicago.\nCompany Benefits:\nThe Company provides a competitive benefits package that includes the following (eligibility requirements apply):\nHealth and Welfare Benefits: Medical (including prescription coverage), Dental, Vision, Health Savings Account, Commuter Account, Health Care and Dependent Care Flexible Spending Accounts, Life Insurance, AD&D, Work/Life Resources (including Employee Assistance Program), and more \nLeave Benefits: Paid holidays, annual Paid Time Off (includes paid state /local paid leave where required), Short-term Disability, Long-term Disability, Other leaves (e.g., Bereavement, FMLA, Adoption, Maternity, Military, Primary & Non-Primary Caregiver) \nRetirement Benefits: Contributory Savings Plan (401k)","description_format":"text","description_chars":7825,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["401k plan","Hybrid work","Life insurance"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Penetration Testing"],"lifecycle":[{"event":"open","at":"2026-10-15T06:07:20Z"}],"visa":[],"liveness":{"score":79,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.84,"p_room":0.945,"age_days":7,"expected_fill_days":20,"reasons":["conf:2","win:mid"],"computed_at":"2026-10-15T19:39:30Z"},"pay":{"stated_usd_annual":100000,"is_top_pay":false},"html_url":"https://alion.io/job/ascot-group-cybersecurity-offense-analyst","json_url":"https://alion.io/job/ascot-group-cybersecurity-offense-analyst.json","meta":{"generated_at":"2026-10-15T19:39:30Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":29790,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-16T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1962322},"rest":"https://alion.io/mcp/rest/get_company?id=1962322"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fascot-group-cybersecurity-offense-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fascot-group-cybersecurity-offense-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fascot-group-cybersecurity-offense-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ascot-group-cybersecurity-offense-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fascot-group-cybersecurity-offense-analyst"}]}