{"id":3994340,"url":"https://alion.io/job/the-vanguard-group-offensive-security-analyst","title":"Offensive Security Analyst","company":{"id":253,"name":"The Vanguard Group","domain":"vanguard.com","url":"https://alion.io/company/vanguard","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":77,"open_postings":69,"ghost_share":0.087,"stale_share":0.623,"repost_share":0.145,"time_to_fill_p50_days":28,"computed_at":"2026-11-09T06:03:00Z"}},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Malvern, United States","Charlotte, United States","Dallas, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":3,"visa_sponsorship":true,"relocation_package":false,"has_equity":false,"technologies":[{"name":"BloodHound","optional":false},{"name":"Burp Suite","optional":false},{"name":"Cobalt Strike","optional":false},{"name":"Impacket","optional":false},{"name":"Metasploit","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"Nmap","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Red Teaming","optional":false},{"name":"AWS","optional":true},{"name":"Azure","optional":true}],"status":"live","first_seen_at":"2026-11-09T00:00:00Z","employer_posted_date":"2026-11-09","last_verified_at":"2026-11-10T00:40:13Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"We are seeking a highly skilled offensive security professional to perform advanced security testing and adversary simulation activities. You will execute assessments across a broad range of technologies and business functions, helping validate the effectiveness of security controls against realistic attack scenarios.\nThe ideal candidate combines strong technical offensive security expertise with excellent communication skills and a passion for continuous learning. You will help advance the maturity of offensive security capabilities while producing meaningful outcomes that strengthen Vanguard's security posture.\nKey Responsibilities\nOffensive Security Operations\nLead and execute penetration tests, adversary emulation exercises, and red team activities.\nAssess web applications, APIs, cloud environments, identity platforms, infrastructure, and emerging technologies.\nSimulate realistic attacker behaviors to identify vulnerabilities, control weaknesses, and attack paths.\nValidate security controls through exploitation and proof-of-concept testing.\nSupport threat-led operations aligned to organizational risk priorities.\nAdversary Emulation & Research\nDevelop and execute attack scenarios based on current threat intelligence and adversary tradecraft.\nLeverage frameworks such as MITRE ATT&CK to design realistic attack simulations.\nResearch emerging attack techniques, vulnerabilities, and exploitation methods.\nContribute to the development of offensive security methodologies and testing procedures.\nSecurity Assessment & Reporting\nAnalyze findings and evaluate business and technical risk.\nProduce high-quality technical reports and executive-ready summaries.\nPresent findings, recommendations, and remediation strategies to stakeholders.\nTrack remediation efforts and provide validation of corrective actions.\nTooling & Automation\nDevelop and maintain offensive security tooling, scripts, and testing frameworks.\nAutomate repetitive testing activities and reporting processes.\nContribute to the evolution of OSFT operational capabilities and infrastructure.\nSupport innovation initiatives that leverage automation and AI to improve testing effectiveness.\nCollaboration & Stakeholder Management\nPartner with engineering, application security, cyber defense, fraud, and technology teams throughout engagements.\nParticipate in purple team activities and collaborative security validation efforts.\nSupport knowledge-sharing initiatives across offensive and defensive security functions.\nProvide technical guidance to less experienced analysts.\nContinuous Improvement\nContribute to capability development initiatives across OSFT.\nAssist with developing testing standards, playbooks, and best practices.\nSupport strategic initiatives that improve offensive security coverage, scale, and maturity.\nMaintain awareness of evolving threat landscapes and industry practices.\nRequired Qualifications\n3-5+ years of offensive security, penetration testing, red teaming, or related cybersecurity experience.\nDemonstrated experience conducting security assessments across web applications, infrastructure, cloud, and identity environments.\nStrong understanding of attacker methodologies, attack chains, and offensive tradecraft.\nExperience using offensive security tools such as Burp Suite, Cobalt Strike, Metasploit, Nmap, BloodHound, Impacket, or equivalent platforms.\nWorking knowledge of MITRE ATT&CK and threat-informed security testing.\nProficiency in Python, PowerShell, Bash, or similar scripting languages.\nStrong written and verbal communication skills.\nPreferred Qualifications\nExperience conducting adversary emulation or red team operations within a large enterprise.\nExperience assessing AWS, Azure, or hybrid cloud environments.\nExperience participating in Purple Team engagements and detection validation exercises.\nKnowledge of AI security, adversarial AI testing, or emerging technology risk assessments.\nOffensive security certifications such as OSCP, CRTO, PNPT, OSEP, GXPN, or equivalent.\nSpecial Factors\nSponsorship\nVanguard is not offering visa sponsorship for this position.About Vanguard\nAt Vanguard, we don't just have a mission-we're on a mission.\nTo work for the long-term financial wellbeing of our clients. To lead through product and services that transform our clients' lives. To learn and develop our skills as individuals and as a team. From Malvern to Melbourne, our mission drives us forward and inspires us to be our best.\nHow We Work\nVanguard has implemented a hybrid working model for the majority of our crew members, designed to capture the benefits of enhanced flexibility while enabling in-person learning, collaboration, and connection. We believe our mission-driven and highly collaborative culture is a critical enabler to support long-term client outcomes and enrich the employee experience.","description_format":"text","description_chars":4840,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Continuous learning","Hybrid work"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Penetration Testing","Wealth Management & Financial Advisors","Asset Management & Funds","Online Brokerage & Trading Platforms"],"lifecycle":[{"event":"open","at":"2026-11-10T00:40:13Z"}],"visa":[{"country":"US","licensed_sponsor":true,"adverts_offering_sponsorship_24m":7,"sanctioned_now":false,"evidence":"H-1B filings in 12 months: 228 · green card filings: 155","filings_12m":228,"filings_prev_12m":301,"green_card_filings_12m":155,"median_offered_wage_usd":148453,"route":null,"cap_exempt":false,"checked_at":"2026-11-09T07:32:21+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)","Alion: sponsorship offered in the employer's own job adverts (24 months)"],"filings_for_role_12m":28}],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":1,"expected_fill_days":28,"reasons":["conf:0","win:early","comp:brand"],"computed_at":"2026-11-10T01:29:59Z"},"pay":null,"html_url":"https://alion.io/job/the-vanguard-group-offensive-security-analyst","json_url":"https://alion.io/job/the-vanguard-group-offensive-security-analyst.json","meta":{"generated_at":"2026-11-10T01:29:59Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":3405,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-11T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":253},"rest":"https://alion.io/mcp/rest/get_company?id=253"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fthe-vanguard-group-offensive-security-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fthe-vanguard-group-offensive-security-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fthe-vanguard-group-offensive-security-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/the-vanguard-group-offensive-security-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fthe-vanguard-group-offensive-security-analyst"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3994340}},{"tool":"search_jobs","arguments":{"company":"vanguard.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3994340},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}