Cybersecurity Analyst – Offensive Security

About the role

LUMA Energy is seeking a Cybersecurity Analyst specialized in offensive security to lead full‑scope Red Team operations across IT, cloud, and OT/ICS environments. The role focuses on realistic adversary simulations, tool development, and delivering actionable findings to improve detection and response capabilities.

Key responsibilities

• Plan, execute, and lead Red Team engagements, penetration testing, and adversary emulation in OT/ICS environments following approved Rules of Engagement.
• Conduct social engineering campaigns (phishing, vishing, physical) to assess human factor vulnerabilities.
• Develop custom offensive tools and scripts to enhance Red Team capabilities and automate processes.
• Document technical findings with clear impact, remediation guidance, and support risk reduction initiatives.
• Collaborate with Blue Team, Threat Intelligence, and IT/OT teams to translate offensive insights into defensive improvements.

Required profile

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or equivalent experience.
• 3–6 years of experience in offensive security, penetration testing, or Red Teaming.
• Experience with cloud platforms (AWS, Azure) and modern enterprise/OT systems.
• Bilingual fluency in Spanish and English.

Required skills

• Hands‑on proficiency with Kali Linux, Metasploit, Burp Suite, Cobalt Strike, BloodHound, Nmap.
• Scripting languages: Python, PowerShell, Bash.
• Deep knowledge of MITRE ATT&CK, OWASP Top 10, and common attack vectors.
• Understanding of OT/ICS, SCADA, and safe‑testing protocols.
• Ability to produce clear technical reports for both technical and non‑technical audiences.