Senior Red Team Analyst

Colonial has provided a wide range of opportunities for job candidates who are highly qualified, skilled, motivated and team players. Employees find exciting opportunities to grow and develop their careers at a stable company which offers a generous compensation and benefits package that includes annual incentive bonuses, retirement plans, insurance coverage and a host of other features that support a happy, active, productive and rewarding life. Come to Colonial, a great place to work, where people matter most, and where safety 24/7 is paramount.

Ready to work for Colonial Pipeline Company?

Are you intrigued by the thought of being part of revolutionizing the energy industry and a new era in the pipeline industry? Do you want to be a part of a company that is obsessed with excellence in everything we do? A company growing and expanding our business that is full of opportunity? If so, we are seeking smart, safety focused, and energetic professionals to join our team to help us to the next level of excellence!

What is it that we do at Colonial Pipeline Company?

Colonial Pipeline is the largest refined products pipeline in the United States, transporting more than 100 million gallons or 2.5 million barrels per day. Colonial transports various grades of gasoline, diesel fuel, home heating oil, jet fuel, and fuels for the U.S. military through a pipeline system. Colonial transports approximately 45 percent of all fuel consumed on the East Coast, providing refined products to more than 50 million Americans.

About the Senior Red Team Analyst Position

The Senior Red Team Analyst plays a critical role in strengthening Colonial Pipeline’s cybersecurity posture by proactively identifying vulnerabilities, emulating real-world threats, and conducting adversary simulation exercises. In this role, you will help enhance cybersecurity defenses, collaborate across teams to address risk, and validate the effectiveness of security controls through rigorous testing.

Leveraging your knowledge of the MITRE ATT&CK framework and advanced technical expertise, you will help ensure the organization is prepared to respond to evolving cyber threats while supporting a culture of continuous improvement in security practices.

What You Get to Do

·        Identify and validate network vulnerabilities using a combination of automated tools and manual testing.

·        Support vulnerability management by clearly communicating identified vulnerabilities to system owners.

·        Partner with system owners throughout the remediation process and retest vulnerabilities to confirm they have been resolved.

·        Maintain automated Red Team infrastructure used for adversary simulation, repeatable security testing, and Security Operations workflows.

·        Work with the supervisor to develop and execute detailed Red Team engagement plans designed to test specific MITRE ATT&CK vectors.

·        Identify areas of security weakness and validate the effectiveness of existing security controls.

·        Partner with Application Development teams to test applications and provide feedback throughout the development process.

·        Help teams deploy secure applications and strengthen the organization’s overall security posture.

·        Provide technical expertise to the Cybersecurity Incident Response Team during cybersecurity incidents, as needed.

What You Bring to the Table

·        Bachelor’s degree is preferred but will consider a combination of education and years' experience

·        At least 4 years of experience working in a hands-on technical security role with a bachelor’s degree; or at least five years of experience in an IT-focused role with security responsibilities.

·        Experience in cybersecurity, network security, threat analysis, ICS security, infrastructure management, patch management, data analysis, reporting, vulnerability assessment, communication, and security analysis.

·        Advanced knowledge of offensive security practices.

·        Advanced documentation skills.

·        A technical security certification.

Skills That Set You Apart

·        Bachelor’s degree in Computer and Information Science, Cybersecurity, or a related field.

·        Six or more years of experience in a hands-on technical security role.

·        Offensive Security Certified Professional (OSCP), GIAC Exploit Researcher and Advanced Penetration Tester (GXPN), CompTIA PenTest+, Certified Ethical Hacker (CEH), or a similar technical security certification.

Advantages of Working at Colonial Pipeline Company

·        Getting to work for a company that helps to meet our country’s energy needs and keeps us moving!

·        Team members who care about each other while accomplishing remarkable things.

·        Highly competitive benefits - Check out Colonial’s Total Rewards.

Are you up to the challenge? What are you waiting for? Apply today!

Colonial Pipeline is an Equal Opportunity Employer and does not discriminate against any employee or applicant for employment because of race, color, religion, sex, national origin, age, disability, sexual orientation, veteran status or any other reason prohibited by federal, state or local law.

Statement to all Third-Party Agencies and Similar Organizations:

Colonial Pipeline accepts resumes only from agencies with which we formally engage their services. Please do not forward resumes to our applicant tracking system, Colonial Pipeline employees, hiring managers, or send to any Colonial Pipeline facility. Colonial Pipeline is not responsible for any fees or charges associated with unsolicited resumes.