Offensive Security Analyst, Senior

Purpose:

UPMC Corporate IT  is hiring an Offensive Security Analyst-Senior to join their Offensive Security team.The team is highly collaborative. The perfect candidate will meet the requirements of the description and also be a strong communicator. Clear documentation of their work and the ability to share the information with both individual contributors who are remediating is risk as well as clear leadership updates. 

This is a hybrid role that requires onsite work for offensive security responsibilities. While the majority of the work can be done remotely, there will be times when on-call rotations and evening work are necessary. This may also involve some travel to UPMC hospitals, offices, or other locations as needed. The work schedule is flexible but must be approved in advance by leadership. 

Responsibilities:

• Execute infrastructure & web application penetration tests independently or as part of a team
• Create detailed engagement plans, thoroughly document findings, and recommend remediations
• Meet with various teams in support of remediation efforts, acting as a technical resource
•  Act in a security consulting role with infrastructure, development, and fellow IAS teams to provide insight to attackertools, technologies and procedures TTPs
• Communicate and collaborate with partner teams, service owners, Information Security, and senior leadership toinfluence, prioritize, and drive the resolution of findings
• Support software development initiatives by working with development teams to integrate security into thedevelopment lifecycle (DevSecOps)
•  Lead & support team strategy, direction, and priorities
• Support Vulnerability Assessment and SOC through troubleshooting, incident response, vulnerability analysis, andpurple teaming
• Advance strategic initiatives by influencing leadership, key stakeholders, and partnering with teams throughout UPMC
• Train and help develop Offensive Security Team operators.*Performs in accordance with system-wide competencies/behaviors.*Performs other duties as assigned.