OSOC Security Analyst - TechOps & Client Integrations

Evolve Security is looking for an OSOC Security Analyst with a TechOps focus to join our growing team. This position sits between our offensive security team and our clients, making sure every engagement starts on solid ground. You will own the technical onboarding and health of client integrations, including Kali testing appliances, cloud access, and scope configuration, and you will troubleshoot client-side issues so our testers can focus on testing. You will also support penetration testing and eASM activities alongside the OSOC team.

Key Responsibilities

• Deploy, configure, and support Kali Linux testing appliances (ISO, OVA, and VM images) in client environments across VMware ESXi, Hyper-V, Proxmox, VirtualBox, and cloud-hosted instances
• Troubleshoot client-side deployment issues such as boot failures, network/VLAN placement, DHCP/static IP configuration, DNS resolution, proxy and firewall restrictions, and outbound connectivity (VPN, reverse SSH, WireGuard/OpenVPN tunnels)
• Monitor the health and connectivity of deployed testing appliances and proactively work with clients to restore access when appliances go offline
• Guide clients through cloud integration setup for AWS (cross-account IAM roles, read-only policies), Azure (app registrations, service principals, role assignments), and GCP (service accounts, IAM bindings), and validate that the granted permissions are sufficient for assessment tooling such as ScoutSuite, Prowler, and Pacu
• Review and validate client scope before and during engagements, confirming that IP ranges, domains, subdomains, web applications, and cloud accounts are entered correctly and match the SOW and Rules of Engagement
• Verify asset ownership (WHOIS, ARIN/RIPE, DNS records, cloud provider attribution) and flag third-party hosted or out-of-scope assets before testing begins
• Maintain and improve internal testing infrastructure, appliance images, and build pipelines, keeping Kali builds patched, hardened, and preloaded with the standard OSOC toolset
• Automate repetitive onboarding and validation tasks (appliance provisioning, connectivity checks, scope validation, cloud permission checks) using Python, Bash, PowerShell, and infrastructure-as-code tools
• Act as the technical point of contact for clients during kick-off calls and onboarding, translating technical requirements into clear, actionable steps for client IT teams
• Escalate integration blockers, scope discrepancies, and security incidents to the appropriate client contacts or internal team members
• Review the eASM dashboard and assist with validating vulnerabilities identified by the ASM system when needed
• Create and maintain documentation, runbooks, and client-facing setup guides for appliance deployment and cloud integrations
• Assist in maturing Evolve Security processes, procedures, templates, and methodologies to improve onboarding speed and engagement quality
• Take on other duties as assigned to support the growth and expansion of enterprise and academy initiatives

• Passionate about cybersecurity and infrastructure, with a curiosity to learn
• 1-2 years of experience in IT operations, system administration, TechOps, or information security
• Strong Linux administration skills, with hands-on experience using and troubleshooting Kali Linux
• Experience with virtualization platforms (VMware, Hyper-V, Proxmox, VirtualBox) and building or customizing VM images and ISOs
• Solid networking fundamentals: TCP/IP, subnetting, routing, VLANs, DNS, DHCP, NAT, firewalls, and VPN technologies
• Working knowledge of AWS, Azure, and/or GCP identity and access management (IAM roles, policies, service principals, service accounts)
• Scripting experience in one or more of: Python, Bash, PowerShell
• Familiarity with TechOps tooling such as Git, Docker, Ansible, Terraform, or CI/CD pipelines
• Foundational understanding of penetration testing methodology and common offensive tools
• Familiarity with cloud security tooling (ScoutSuite, Prowler, Pacu, ROADtools) is a plus
• Security+ required; Linux, cloud, or offensive certifications a strong plus (Linux+, RHCSA, AWS Solutions Architect / SysOps, AZ-104, AZ-500, PNPT, OSCP, or equivalent)
• Strong troubleshooting mindset and the patience to work through problems with non-technical or busy client IT teams
• Ability to interface with clients, using clear communication and consulting skills
• Strongly self-motivated, organized, and able to manage multiple client onboardings at once
• Strong communication skills (oral and written) and ability to work as part of a team

Who is Evolve Security?

Evolve Security is a cybersecurity services firm headquartered in Chicago, IL. We are dedicated to improving our client’s security posture by providing continuous penetration testing, training services, and talent solutions.

In addition to our professional cybersecurity service offerings, Evolve Security offers a cybersecurity bootcamp, “Evolve Academy”, currently ranked the #1 cybersecurity bootcamp in the world. The Cybersecurity Bootcamp in Chicago provides immersive training, giving students the concrete and practical skills, needed on the job. Students gain real work experience through live security assessment work that they perform on not-for-profit companies.

We are passionate about directly improving our customers’ security posture, and we proudly train others to help meet the need for qualified cybersecurity talent.

Benefits Include

• Healthcare Benefits
• 401(k) Match
• Parental Leave
• Flexible Paid Time Off
• Annual vacation reimbursement

Salary Range: $75,000-$90,000/year