E

Evolve Security

Continuous penetration testing with ASM

OSOC Security Analyst - TechOps & Client Integrations

Implementation & Technical Account ManagementUpdated on Nov 7
Full-timeRemote in USARemote

About the Job

Requirements

  • 1–2 years of experience in IT operations, system administration, TechOps, or information security.
  • Strong Linux administration skills, including hands-on Kali Linux use and troubleshooting.
  • Experience with VMware, Hyper-V, Proxmox, and VirtualBox, including building or customizing virtual machine images and ISO files.
  • Solid networking fundamentals, including TCP/IP, subnetting, routing, VLANs, DNS, DHCP, NAT, firewalls, and VPN technologies.
  • Working knowledge of AWS, Azure, and/or GCP identity and access management, including IAM roles, policies, service principals, and service accounts.
  • Scripting experience in one or more of Python, Bash, and PowerShell.
  • Familiarity with TechOps tools such as Git, Docker, Ansible, Terraform, or CI/CD pipelines.
  • Foundational understanding of penetration testing methodology and common offensive tools.
  • Security+ certification is required.
  • Ability to interface with clients using clear communication and consulting skills.
  • Ability to organize and manage multiple client onboardings at once.
  • Strong oral and written communication skills and ability to work as part of a team.

Responsibilities

  • Deploy, configure, and support Kali Linux testing appliances (ISO, OVA, and VM images) in client environments across VMware ESXi, Hyper-V, Proxmox, VirtualBox, and cloud-hosted instances.
  • Troubleshoot client-side deployment issues, including boot failures, network/VLAN placement, DHCP/static IP configuration, DNS resolution, proxy and firewall restrictions, and outbound connectivity through VPN, reverse SSH, WireGuard, or OpenVPN tunnels.
  • Monitor the health and connectivity of deployed testing appliances and proactively work with clients to restore access when appliances go offline.
  • Guide clients through cloud integration setup for AWS (cross-account IAM roles and read-only policies), Azure (app registrations, service principals, and role assignments), and GCP (service accounts and IAM bindings), and validate permissions for assessment tools such as ScoutSuite, Prowler, and Pacu.
  • Review and validate client scope before and during engagements, confirming that IP ranges, domains, subdomains, web applications, and cloud accounts are correctly entered and match the SOW and Rules of Engagement.
  • Verify asset ownership using WHOIS, ARIN/RIPE, DNS records, and cloud provider attribution, and flag third-party-hosted or out-of-scope assets before testing begins.
  • Maintain and improve internal testing infrastructure, appliance images, and build pipelines, keeping Kali builds patched, hardened, and preloaded with the standard OSOC toolset.
  • Automate repetitive onboarding and validation tasks, including appliance provisioning, connectivity checks, scope validation, and cloud permission checks, using Python, Bash, PowerShell, and infrastructure-as-code tools.
  • Act as the technical point of contact for clients during kick-off calls and onboarding, translating technical requirements into actionable steps for client IT teams.
  • Escalate integration blockers, scope discrepancies, and security incidents to appropriate client contacts or internal team members.
  • Review the eASM dashboard and assist with validating vulnerabilities identified by the ASM system when needed.
  • Create and maintain documentation, runbooks, and client-facing setup guides for appliance deployment and cloud integrations.
  • Improve Evolve Security processes, procedures, templates, and methodologies to increase onboarding speed and engagement quality.
  • Take on other duties as assigned to support enterprise and academy initiatives.

Desired Qualifications

  • Linux, cloud, or offensive security certifications are a plus, including Linux+, RHCSA, AWS Solutions Architect/SysOps, AZ-104, AZ-500, PNPT, OSCP, or equivalent.
  • Familiarity with cloud security tools such as ScoutSuite, Prowler, Pacu, and ROADtools.
  • A strong troubleshooting mindset and patience when working through problems with non-technical or busy client IT teams.
  • Self-motivation and organization.

About the Company

Evolve Security

Continuous penetration testing with ASM

Evolve Security focuses on offensive cybersecurity with continuous testing. It provides Attack Surface Management (ASM) and Continuous Penetration Testing (CPT) through the Darwin Attack Platform, combining AI automation with human expert involvement and cyber advisory services. The approach works by continuously scanning and probing an organization’s exposed systems and applications, using automated tools to identify weaknesses and manual testing to validate findings, then offering guidance to fix gaps. Differentiation comes from the blend of automated AI-driven testing and expert human review, the ongoing nature of CPT and ASM (not one-off scans), and the brand’s cyber advisory and training arm, including an Academy ranked #1 cybersecurity bootcamp for six straight years. The goal is to improve clients’ cyber resiliency by maintaining persistent visibility into attack surfaces and regularly uncovering and addressing weaknesses before real attackers can exploit them.

Company size
51-200
Company stage
Not listed
Total funding
Not listed
Headquarters
Chicago, IL
Founded
2016

Recently Posted Jobs

Explore more opportunities at Evolve Security

See more jobs