Evolve Security is looking for an OSOC Security Analyst with a TechOps focus to join our growing team. This position sits between our offensive security team and our clients, making sure every engagement starts on solid ground. You will own the technical onboarding and health of client integrations, including Kali testing appliances, cloud access, and scope configuration, and you will troubleshoot client-side issues so our testers can focus on testing. You will also support penetration testing and eASM activities alongside the OSOC team.
Key Responsibilities
Deploy, configure, and support Kali Linux testing appliances (ISO, OVA, and VM images) in client environments across VMware ESXi, Hyper-V, Proxmox, VirtualBox, and cloud-hosted instances
Troubleshoot client-side deployment issues such as boot failures, network/VLAN placement, DHCP/static IP configuration, DNS resolution, proxy and firewall restrictions, and outbound connectivity (VPN, reverse SSH, WireGuard/OpenVPN tunnels)
Monitor the health and connectivity of deployed testing appliances and proactively work with clients to restore access when appliances go offline
Guide clients through cloud integration setup for AWS (cross-account IAM roles, read-only policies), Azure (app registrations, service principals, role assignments), and GCP (service accounts, IAM bindings), and validate that the granted permissions are sufficient for assessment tooling such as ScoutSuite, Prowler, and Pacu
Review and validate client scope before and during engagements, confirming that IP ranges, domains, subdomains, web applications, and cloud accounts are entered correctly and match the SOW and Rules of Engagement
Verify asset ownership (WHOIS, ARIN/RIPE, DNS records, cloud provider attribution) and flag third-party hosted or out-of-scope assets before testing begins
Maintain and improve internal testing infrastructure, appliance images, and build pipelines, keeping Kali builds patched, hardened, and preloaded with the standard OSOC toolset
Automate repetitive onboarding and validation tasks (appliance provisioning, connectivity checks, scope validation, cloud permission checks) using Python, Bash, PowerShell, and infrastructure-as-code tools
Act as the technical point of contact for clients during kick-off calls and onboarding, translating technical requirements into clear, actionable steps for client IT teams
Escalate integration blockers, scope discrepancies, and security incidents to the appropriate client contacts or internal team members
Review the eASM dashboard and assist with validating vulnerabilities identified by the ASM system when needed
Create and maintain documentation, runbooks, and client-facing setup guides for appliance deployment and cloud integrations
Assist in maturing Evolve Security processes, procedures, templates, and methodologies to improve onboarding speed and engagement quality
Take on other duties as assigned to support the growth and expansion of enterprise and academy initiatives
Requirements
Passionate about cybersecurity and infrastructure, with a curiosity to learn
1-2 years of experience in IT operations, system administration, TechOps, or information security
Strong Linux administration skills, with hands-on experience using and troubleshooting Kali Linux
Experience with virtualization platforms (VMware, Hyper-V, Proxmox, VirtualBox) and building or customizing VM images and ISOs
Solid networking fundamentals: TCP/IP, subnetting, routing, VLANs, DNS, DHCP, NAT, firewalls, and VPN technologies
Working knowledge of AWS, Azure, and/or GCP identity and access management (IAM roles, policies, service principals, service accounts)
Scripting experience in one or more of: Python, Bash, PowerShell
Familiarity with TechOps tooling such as Git, Docker, Ansible, Terraform, or CI/CD pipelines
Foundational understanding of penetration testing methodology and common offensive tools
Familiarity with cloud security tooling (ScoutSuite, Prowler, Pacu, ROADtools) is a…