security
Posted 20 hours agoSecurity Analyst V
at ONEOK
Tulsa, United StatesOn-site
Responsibilities
- Develop and validate threat detections based on emerging adversary tradecraft using SIEM, EDR, and security analytics platforms.
- Perform penetration testing, security architecture reviews, and application security assessments.
- Develop custom tooling, automation, attack emulation capabilities, and proof-of-concept exploits to emulate advanced adversary behavior and assess defensive effectiveness.
- Monitor emerging adversary behaviors and assess organizational exposure through continuous validation of internal and external attack surfaces.
Requirements
- Experience with Operational Technology (OT) environments, industrial control systems, and associated protocols and security technologies is preferred.
- Education Bachelor's Degree in information technology, other related field, or an equivalent combination of formal education and the following job related experience: Work
- experience in information security 3+ years with significant duties in offensive security, read teaming, pentesting, or detection engineering
- Experience in a regulated sector.
- Familiarity with gas / utilities business processes Licenses and Certifications (Preferred but not required) OSCP - OffSec Certified Professional or other relevant OffSec certifications GPEN - GAIC Penetration Tester or other relevant GIAC certifications CISSP Certified Information Systems Security Professional Strength Factor Rating - Physical Demands/Requirements Sedentary Work - Exerting up to 10 pounds of force occasionally (Occasionally: activity or condition exists up to 1/3 of the time) and/or a
Experience
- #WeAreONEOK – Fortune 500 company. 100+ years in business.
- Experience 6+ years related work
Benefits
- Expected Salary Range $143,000.00 - $215,000.00
Contact
- To request an accommodation email HRSolutions@ONEOK.com or call 1-855-663-6547.
Additional details
- JOB SUMMARY Job Profile Summary This role serves as a senior offensive security analyst focused on internal red teaming, attack simulation, and threat and detection engineering within the Security Assurance team.
- This role ensures our systems are evaluated against emerging adversary tactics through continuous validation and threat-informed operations.
- Responsibilities Lead adversary simulations, purple-team exercises, and red-team engagements based on real-world threat actor tactics, techniques, and procedures (TTPs).
- Partner with Security Operations Center, Engineering, and IT teams to translate offensive security findings into actionable detection content, control improvements, and architectural enhancements.
- Measure detection coverage through threat hunting and automated validation.
- Serve as a technical leader within the Security Assurance team by mentoring team members, driving offensive security strategy, and communicating risk and remediation recommendations to technical and executive stakeholders.
- Sedentary work involves sitting most of the time, but may involve walking or standing for brief periods of time.
- Jobs are sedentary if walking and standing are required only occasionally and all other sedentary criteria are met.
- Strength Factor Description - Physical Demands/Requirements Standing: Remaining on one's feet in an upright position at a work station without moving about (Occasionally) Walking: Moving about on foot (Frequently) Sitting: Remaining in a seated position (Constantly) Lifting: Raising or lowering an object from one level to another (includes upward pulling) (Occasionally) Carrying: Transporting an object, usually holding it in the hands or arms, or on the shoulder (Occasionally) Pushing: Exerting force upon
- All qualified applicants will receive consideration for employment without regard to race, color, sex, pregnancy, sexual orientation, age, religion, creed, national origin, gender identity, disability, military/veteran status, genetic information or any other categories protected by applicable law.