OSOC Security Analyst - TechOps & Client Integrations

About the role

Evolve Security is looking for an OSOC Security Analyst with a TechOps focus to join our growing team. This position sits between our offensive security team and our clients, making sure every engagement starts on solid ground. You will own the technical onboarding and health of client integrations, including Kali testing appliances, cloud access, and scope configuration, and you will troubleshoot client-side issues so our testers can focus on testing. You will also support penetration testing and eASM activities alongside the OSOC team.

Key Responsibilities

Deploy, configure, and support Kali Linux testing appliances (ISO, OVA, and VM images) in client environments across VMware ESXi, Hyper-V, Proxmox, VirtualBox, and cloud-hosted instances

Troubleshoot client-side deployment issues such as boot failures, network/VLAN placement, DHCP/static IP configuration, DNS resolution, proxy and firewall restrictions, and outbound connectivity (VPN, reverse SSH, WireGuard/OpenVPN tunnels)

Monitor the health and connectivity of deployed testing appliances and proactively work with clients to restore access when appliances go offline

Guide clients through cloud integration setup for AWS (cross-account IAM roles, read-only policies), Azure (app registrations, service principals, role assignments), and GCP (service accounts, IAM bindings), and validate that the granted permissions are sufficient for assessment tooling such as ScoutSuite, Prowler, and Pacu

Review and validate client scope before and during engagements, confirming that IP ranges, domains, subdomains, web applications, and cloud accounts are entered correctly and match the SOW and Rules of Engagement

Verify asset ownership (WHOIS, ARIN/RIPE, DNS records, cloud provider attribution) and flag third-party hosted or out-of-scope assets before testing begins

Maintain and improve internal testing infrastructure, appliance images, and build pipelines, keeping Kali builds patched, hardened, and preloaded with the standard OSOC toolset

Automate repetitive onboarding and validation tasks (appliance provisioning, connectivity checks, scope validation, cloud permission checks) using Python, Bash, PowerShell, and infrastructure-as-code tools

Act as the technical point of contact for clients during kick-off calls and onboarding, translating technical requirements into clear, actionable steps for client IT teams

Escalate integration blockers, scope discrepancies, and security incidents to the appropriate client contacts or internal team members

Review the eASM dashboard and assist with validating vulnerabilities identified by the ASM system when needed

Create and maintain documentation, runbooks, and client-facing setup guides for appliance deployment and cloud integrations

Assist in maturing Evolve Security processes, procedures, templates, and methodologies to improve onboarding speed and engagement quality

Take on other duties as assigned to support the growth and expansion of enterprise and academy initiatives

Requirements

Passionate about cybersecurity and infrastructure, with a curiosity to learn

1-2 years of experience in IT operations, system administration, TechOps, or information security

Strong Linux administration skills, with hands-on experience using and troubleshooting Kali Linux

Experience with virtualization platforms (VMware, Hyper-V, Proxmox, VirtualBox) and building or customizing VM images and ISOs

Solid networking fundamentals: TCP/IP, subnetting, routing, VLANs, DNS, DHCP, NAT, firewalls, and VPN technologies

Working knowledge of AWS, Azure, and/or GCP identity and access management (IAM roles, policies, service principals, service accounts)

Scripting experience in one or more of: Python, Bash, PowerShell

Familiarity with TechOps tooling such as Git, Docker, Ansible, Terraform, or CI/CD pipelines

Foundational understanding of penetration testing methodology and common offensive tools

Familiarity with cloud security tooling (ScoutSuite, Prowler, Pacu, ROADtools) is a plus

Security+ required; Linux, cloud, or offensive certifications a strong plus (Linux+, RHCSA, AWS Solutions Architect / SysOps, AZ-104, AZ-500, PNPT, OSCP, or equivalent)

Strong troubleshooting mindset and the patience to work through problems with non-technical or busy client IT teams

Ability to interface with clients, using clear communication and consulting skills

Strongly self-motivated, organized, and able to manage multiple client onboardings at once

Strong communication skills (oral and written) and ability to work as part of a team

Benefits

Who is Evolve Security?

Evolve Security is a cybersecurity services firm headquartered in Chicago, IL. We are dedicated to improving our client’s security posture by providing continuous penetration testing, training services, and talent solutions.

In addition to our professional cybersecurity service offerings, Evolve Security offers a cybersecurity bootcamp, “Evolve Academy”, currently ranked the #1 cybersecurity bootcamp in the world. The Cybersecurity Bootcamp in Chicago provides immersive training, giving students the concrete and practical skills, needed on the job. Students gain real work experience through live security assessment work that they perform on not-for-profit companies.

We are passionate about directly improving our customers’ security posture, and we proudly train others to help meet the need for qualified cybersecurity talent.

Benefits Include

Healthcare Benefits

401(k) Match

Parental Leave

Flexible Paid Time Off

Annual vacation reimbursement

Salary Range: $75,000-$90,000/year

Posting text as published by Evolve Security.

The evidence behind this listing

Workplace

Remote Employer field

Seniority

Not established

Employment type

Not established

Location as listed

United States

Pay and work authorization

Stated pay

Not stated

Visa sponsorship

Not stated

Security clearance

Not established

Citizenship

Not established