OSOC Security Analyst – TechOps, Client Integrations

This is a fully remote position, open to applicants in Illinois.

📋 Description

• Deploy, configure, and provide support for Kali Linux testing appliances within client environments utilizing VMware ESXi, Hyper-V, Proxmox, VirtualBox, and cloud-hosted instances.

• Address client-side deployment challenges, including boot failures, network/VLAN settings, DHCP/static IP configurations, DNS resolution, proxy and firewall limitations, and outbound connectivity issues.

• Monitor the health and connectivity of deployed testing appliances, collaborating with clients to restore access when necessary.

• Assist clients in setting up AWS, Azure, and GCP cloud integrations, ensuring the validation of permissions for assessment tools.

• Review and confirm client scope, encompassing IP ranges, domains, subdomains, web applications, and cloud accounts, in accordance with the SOW and Rules of Engagement.

• Authenticate asset ownership and identify third-party hosted or out-of-scope assets prior to testing.

• Enhance and maintain internal testing infrastructure, appliance images, and build pipelines.

• Automate onboarding and validation processes using Python, Bash, PowerShell, and infrastructure-as-code tools.

• Act as the technical point of contact for clients during kickoff calls and the onboarding process.

• Escalate any integration blockers, discrepancies in scope, and security incidents as they arise.

• Review the eASM dashboard and assist in validating identified vulnerabilities.

• Develop and maintain documentation, runbooks, and client-facing setup guides.

• Enhance Evolve Security’s processes, procedures, templates, and methodologies.

• Contribute to enterprise and academy initiatives through additional assigned responsibilities.

⛳️ Requirements

• A strong passion for cybersecurity and infrastructure, coupled with an eagerness to learn.

• 1-2 years of experience in IT operations, system administration, TechOps, or information security.

• Proficient in Linux administration with practical experience in using and troubleshooting Kali Linux.

• Familiarity with virtualization platforms (VMware, Hyper-V, Proxmox, VirtualBox) and experience building or customizing VM images and ISOs.

• Solid understanding of networking fundamentals: TCP/IP, subnetting, routing, VLANs, DNS, DHCP, NAT, firewalls, and VPN technologies.

• Working knowledge of identity and access management (IAM roles, policies, service principals, service accounts) in AWS, Azure, and/or GCP.

• Scripting proficiency in one or more languages: Python, Bash, PowerShell.

• Familiarity with TechOps tools such as Git, Docker, Ansible, Terraform, or CI/CD pipelines.

• Basic understanding of penetration testing methodology and common offensive tools.

• Familiarity with cloud security tools (ScoutSuite, Prowler, Pacu, ROADtools) is advantageous.

• Security+ certification is required; additional certifications in Linux, cloud, or offensive security (Linux+, RHCSA, AWS Solutions Architect / SysOps, AZ-104, AZ-500, PNPT, OSCP, or equivalent) are highly desirable.

• Strong troubleshooting abilities and the patience to resolve issues with non-technical or busy client IT teams.

• Capability to interact with clients using clear communication and consulting skills.

• Highly self-motivated, organized, and adept at managing multiple client onboarding processes simultaneously.

• Excellent communication skills (both oral and written) and the ability to collaborate effectively within a team.

🏝️ Benefits

• Healthcare Benefits

• 401(k) Match

• Parental Leave

• Flexible Paid Time Off

• Annual vacation reimbursement