{"id":3165650,"url":"https://alion.io/job/luma-energy-cybersecurity-analyst-offensive-security","title":"Cybersecurity Analyst, Offensive Security","company":{"id":1777179,"name":"LUMA Energy","domain":"lumapr.com","url":"https://alion.io/company/lumapr","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":113000,"max_usd":217000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":1306},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Bash","optional":false},{"name":"BloodHound","optional":false},{"name":"Burp Suite","optional":false},{"name":"Cobalt Strike","optional":false},{"name":"Kali Linux","optional":false},{"name":"Linux","optional":false},{"name":"Metasploit","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"Nmap","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Red Teaming","optional":false}],"status":"live","first_seen_at":"2026-10-23T17:17:45Z","employer_posted_date":"2026-10-23","last_verified_at":"2026-10-24T02:49:46Z","board_verified":true,"closed_at":null,"days_open":2,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":2},"description":"Job Summary:\nLeads and executes full-scope Red Team operations to identify vulnerabilities across IT, cloud, and OT/ICS environments and evaluate organizational detection and response readiness. Translates offensive insights into measurable defensive improvements by conducting realistic adversary simulations, developing specialized tools, and delivering clear, actionable findings.Job Description:\nPlans, executes, and leads Red Team engagements, adversary emulation, and penetration testing across OT/ICS environments to evaluate organizational resilience within approved Rules of Engagement (RoE).\n\nPerforms full-spectrum offensive operations using real-world TTPs to assess and challenge detection and response capabilities.\n\nConducts social engineering campaigns (phishing, vishing, physical) to test human factors vulnerabilities and improve security awareness.\n\nExecutes OT/ICS assessments, follow formal safe-testing protocols and cross-team coordination to prevent operational disruption and protect critical infrastructure.\n\nParticipates in Purple Team exercises to validate and improve detection, response, and prevention controls\n\nDevelops custom offensive tools, and scripts, to enhance Red Team capabilities and automate operational processes\n\nDocuments technical findings with clear impact and remediation guidance to support informed decisions and drive measurable risk reduction.\n\nCollaborates with Blue Team, Threat Intelligence, and IT/OT teams to translate offensive insights into actionable defensive improvements\n\nMaintain expertise on emerging threats, techniques, and tools relevant to the energy sector to ensure engagements reflect current and realistic adversary behaviors.\n\nSupports vulnerability assessments and after-hours operations to improve continuous threat exposure management and maintain Red Team Readiness\n\nFollows established company policies, procedures, and standards to ensure full compliance with applicable laws and industry regulations.\n\nParticipates in storm restoration tasks and assigned drills to contribute to the safe and reliable recovery of services.\n\nPerforms additional tasks aligned with role expectations and qualifications to support team goals and operational flexibility.\n\nAdditional Job Description:\nEducation\nBachelor's degree in Cybersecurity, Computer Science, Information Technology.\n\nExperience\n3-6 years of experience in offensive security, penetration testing, or Red Teaming.\n\nExperience with cloud environments (AWS, Azure) and modern enterprise/OT systems.\n\nAdditional experience may substitute for required education when it aligns with the competencies and knowledge necessary for the role:\nAssociate’s degree in Cybersecurity, Computer Science, Information Technology may substitute when accompanied by a minimum of 5 years of experience in offensive security, penetration testing, or Red Teaming and at least 3 years of experience performing a previous Analyst role.\n\nHigh School or equivalent (GED) when accompanied by a minimum of 8 years of experience in offensive security, penetration testing, or Red Teaming and at least 5 years of experience performing a previous Analyst role.\n\nCompetencies (Skills)\nAdvanced Offensive Security Expertise - Demonstrates deep hands-on proficiency with penetration testing and Red Team tools (Kali Linux, Metasploit, Burp Suite, Cobalt Strike, BloodHound, Nmap) and scripting languages (Python, PowerShell, Bash) to execute realistic adversary simulations.\n\nAdversary Techniques & Framework Mastery - Applies extensive knowledge of MITRE ATT&CK, OWASP Top 10, and common attack vectors across network, web, cloud, identity, and OT environments to conduct targeted offensive operations.\n\nOT/ICS Security & Safe -Testing Practices - Utilizes strong working knowledge of ICS/SCADA/OT systems, safe-testing protocols, and cross-team coordination methods to ensure non-disruptive and secure assessments in critical infrastructure environments.\n\nAnalytical, Reporting, and Communication Skills - Synthesizes complex technical findings into clear, accurate reports with business-impact context and actionable remediation guidance, delivering information effectively to both technical and non-technical audiences.\n\nCollaboration & Cross -Functional Integration - Works effectively with Blue Team, Threat Intelligence, IT, and OT partners to translate offensive insights into defensive improvements and contribute to Purple Team exercises.\n\nEthical Standards & Confidentiality - Maintains high ethical principles and exercises proper judgment when handling sensitive information, demonstrating reliability and trustworthiness in all offensive security activities.\n\nBilingual Fluency - Communicates clearly and professionally in both Spanish and English to coordinate with diverse teams across multiple environments.\n\nLicenses/Certifications\nAt least one relevant certification: OSCP, OSCE, CRTO, GPEN, or equivalent\n\nTravel Requirements\nNo\n\nPhysical Demands\nStationary Position: Constantly\n\nPushing/ Pulling/ Reaching: Seldom\n\nKneel: Seldom\n\nGrab: Seldom\n\nBend: Seldom\n\nLift/Carry over: 0 - 15 pounds\n\nWorking Conditions\nWet or humid: Seldom\n\nWorking near or on moving mechanical parts: Never\n\nWorking near or on heavy machinery: Never\n\nWorking in high places: Never\n\nExposed to fumes or airborne particles: Never\n\nFrequency of working in outdoor weather conditions: Never\n\nWork with electricity: Never\n\nLoud noise conditions: Seldom\n\nLUMA Energy is an Equal Employment Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, military status, disability, or any other characteristic protected by federal or local laws.","description_format":"text","description_chars":5800,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"high_school","optional":false},"security_clearance":false,"languages":[{"language":"Spanish","level":"All levels","optional":false}]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Penetration Testing","Information Security"],"lifecycle":[{"event":"open","at":"2026-10-23T17:17:45Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":1,"expected_fill_days":36,"reasons":["conf:26","velocity","win:early"],"computed_at":"2026-10-25T05:49:26Z"},"pay":null,"html_url":"https://alion.io/job/luma-energy-cybersecurity-analyst-offensive-security","json_url":"https://alion.io/job/luma-energy-cybersecurity-analyst-offensive-security.json","meta":{"generated_at":"2026-10-26T01:23:51Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":1770,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-27T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1777179},"rest":"https://alion.io/mcp/rest/get_company?id=1777179"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fluma-energy-cybersecurity-analyst-offensive-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fluma-energy-cybersecurity-analyst-offensive-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fluma-energy-cybersecurity-analyst-offensive-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/luma-energy-cybersecurity-analyst-offensive-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fluma-energy-cybersecurity-analyst-offensive-security"}]}