CyberSecurity Analyst II

Job Details

The CyberSecurity Analyst II is a senior level role within Information Security’s Offensive Security team that is responsible for planning, executing, and leading advanced offensive security operations, including red-teaming, adversary simulation, and penetration testing. This role focuses on emulating real-world threat actors to identify vulnerabilities, assess organizational resilience, and provide actionable recommendations to strengthen security posture. The position requires deep technical expertise, strategic thinking, and the ability to collaborate across teams to improve enterprise defenses against sophisticated and relevant cyber threats.

Job Description

Essential Functions

• Interacts with co-workers, visitors, and other staff consistent with the values of Jefferson.
• Design and execute full-scope red team engagements simulating advanced persistent threats (APTs).
• Conduct adversary emulation exercises using frameworks such as MITRE ATT&CK.
• Perform penetration testing across networks, applications, cloud environments, and physical security controls.
• Develop custom tools, scripts, and exploits to support offensive operations.
• Identify and document vulnerabilities, misconfigurations, and security gaps in enterprise systems.
• Collaborate with defensive teams to validate detection and response capabilities.
• Provide detailed reports and executive-level summaries of findings and recommendations.
• Maintain awareness of emerging threats, tactics, techniques, and procedures (TTPs).
• Lead tabletop exercises and purple team engagements to enhance detection and response.
• Ensure compliance with organizational and regulatory security standards during engagements.
• Mentor junior team members and contribute to knowledge-sharing initiatives.
• Participate in threat modeling and attack surface analysis for new technologies.
• Develop and maintain operational playbooks for offensive security activities.
• Communicate technical findings effectively to both technical and non-technical stakeholders.
• Support incident response teams during active investigations when offensive expertise is required.

Competencies (Knowledge, Skills, and Abilities Required):

• Advanced advanced hands-on and technical knowledge of offensive security methodologies, penetration testing, and exploit development.
• Experience with offensive security tools (e.g., Cobalt Strike, Burp Suite, BloodHound).
• Strong understanding of adversary TTPs and threat modeling frameworks.
• Ability to analyze complex environments and develop creative attack strategies.
• Skilled in delivering clear, concise reports and presentations to diverse and executive audiences.
• Ability to work effectively with defensive teams and leadership to improve security posture.

Minimum Education and Experience Requirements:

Education:

• Bachelor’s degree in Computer Science, Cybersecurity, or related field (or High School diploma with equivalent experience).
• 5+ years of experience in offensive security, penetration testing, or red team operations.
• Demonstrated experience leading complex engagements and developing custom attack tools.

Work Shift

Workday Day (United States of America)

Worker Sub Type

Regular

Employee Entity

Thomas Jefferson University

Primary Location Address

1100 Virginia Drive, Fort Washington, Pennsylvania, United States of America

Nationally ranked, Jefferson, which is principally located in the greater Philadelphia region, Lehigh Valley and Northeastern Pennsylvania and southern New Jersey, is reimagining health care and higher education to create unparalleled value. Jefferson is more than 65,000 people strong, dedicated to providing the highest-quality, compassionate clinical care for patients; making our communities healthier and stronger; preparing tomorrow's professional leaders for 21st-century careers; and creating new knowledge through basic/programmatic, clinical and applied research.