{"schemaVersion":"jobsearcher.job.v1","id":"79b8a7680a6ef2880d4e1cef","url":"https://jobsearcher.com/jobs/79b8a7680a6ef2880d4e1cef","canonicalUrl":"https://jobsearcher.com/jobs/79b8a7680a6ef2880d4e1cef","title":"Offensive Security Analyst","description":"Abbott is a global healthcare leader that helps people live more fully at all stages of life. Our portfolio of life-changing technologies spans the spectrum of healthcare, with leading businesses and products in diagnostics, medical devices, nutritionals and branded generic medicines. Our 122,000 colleagues serve people in more than 160 countries.\n\nWorking at Abbott\n\nAt Abbott, you can do work that matters, grow, and learn, care for yourself and your family, be your true self, and live a full life. You’ll also have access to:\n\nCareer development with an international company where you can grow the career you dream of.\nEmployees can qualify for free medical coverage in our Health Investment Plan (HIP) PPO medical plan in the next calendar year.\nAn excellent retirement savings plan with a high employer contribution\nTuition reimbursement, the Freedom 2 Save student debt program, and FreeU education benefit - an affordable and convenient path to getting a bachelor’s degree.\nA company recognized as a great place to work in dozens of countries worldwide and named one of the most admired companies in the world by Fortune.\nA company that is recognized as one of the best big companies to work for as well as the best place to work for diversity, working mothers, female executives, and scientists.\n\nThe Opportunity\n\nThe Offensive Security Analyst supports Abbott’s Enterprise Cybersecurity Operations, Red Team Operations program by executing authorized penetration tests, supporting adversary emulation and purple team exercises, and validating vulnerabilities across internal and external assets. Working within defined methodologies, scope, and Rules of Engagement, the analyst develops hands on offensive security expertise while producing clear, actionable findings that measurably improve Abbott’s security posture. The role emphasizes technical execution, continuous skill development, and safe, ethical testing within a regulated healthcare environment.\n\nThis position reports to the Manager of Red Team Operations within Enterprise Cybersecurity and supports offensive security testing across Abbott’s enterprise technology environment. Responsibilities emphasize hands on execution and technical skill development under senior oversight, with exposure to purple team operations, vulnerability validation, cloud and identity attack paths, and emerging threat areas. The analyst is expected to grow toward performing standard assessments with increasing independence.\n\nAbbott operates in a regulated healthcare and medical device environment, so testing may involve sensitive data, including PHI, and patient adjacent or clinical systems. The analyst is expected to minimize captured sensitive data, store evidence only in approved locations, coordinate testing windows to limit operational impact, and comply with all applicable authorization, privacy, and regulatory requirements.\n\nWhat You’ll Do\n\nOffensive testing and adversary emulation\n\nThe analyst plans and executes authorized penetration tests against Abbott owned assets, including web applications, APIs, network infrastructure, and cloud environments, within approved scope and Rules of Engagement. This includes supporting purple team adversary emulation exercises by assisting with scenario development, executing ATT&CK mapped tactics, techniques, and procedures, validating detection and response coverage alongside defensive teams, and documenting lessons learned. The analyst supports red team and objective based engagements under senior direction and contributes to specialized assessments.\n\nVulnerability validation\n\nThe analyst performs vulnerability validation and exploit feasibility assessments to confirm real-world risk and reduce false positives before remediation prioritization. Individual weaknesses are analyzed and chained into meaningful attack paths mapped to MITRE ATT&CK, OWASP, and CWE, and the analyst develops and safely tests proof of concept exploits within authorized environments.\n\nReporting and communication\n\nThe analyst produces clear, structured assessment reports and executive summaries with supporting evidence, CVSS based severity justification, business risk context, and actionable remediation guidance. The role supports post engagement readouts, knowledge transfer sessions, and remediation discussions with application owners and IT teams, and translates technical findings for both technical and non-technical audiences.\n\nCollaboration and program contribution\n\nThe analyst collaborates with the Incident Response, Threat Intelligence, Vulnerability Management, Detection Engineering, and Cybersecurity Architecture teams, and contributes to service metrics and dashboards that track testing coverage, vulnerability trends, and detection effectiveness over time. The role also contributes to team methodology, tooling, playbooks, and documentation held in SharePoint, Git, and wiki resources.\n\nProfessional conduct and development\n\nThe analyst operates strictly within authorization, scope, Rules of Engagement, and legal and ethical boundaries, exercising discretion when handling highly sensitive data, including PHI, and patient-adjacent or clinical systems. Complex, novel, or high risk findings are escalated promptly with appropriate documentation. The analyst continuously develops offensive security skills through self-directed learning, labs, and research, maintaining growing proficiency with standard tooling such as Burp Suite, Nmap, BloodHound, and content-discovery tools.\n\nEducation and Experience You’ll Bring\n\nRequired Qualifications\n\nA bachelor’s degree in Cybersecurity, Information Security, Computer Science, Information Technology, or a related field is expected, or equivalent practical experience and certifications.\nCandidates typically bring one to three years of relevant cybersecurity experience, and internship, co-op, or applied academic and lab experience will be considered.\nWorking knowledge of Windows and Linux operating systems, networking fundamentals, and Active Directory concepts.\nFamiliarity with offensive security frameworks and standards such as MITRE ATT&CK, OWASP, PTES, CWE, and CVSS.\n Exposure to scripting or automation such as Python, PowerShell, or Bash.\n\nPreferred Qualifications\n\nFoundational knowledge of web technologies, including HTTP and HTTPS, REST APIs, and authentication mechanisms, and of common vulnerability classes such as the OWASP Top 10.\nCandidates should have hands-on familiarity with core offensive security tooling such as Burp Suite, Nmap, Metasploit, and Kali Linux, or demonstrable applied lab proficiency and clear intent to develop these skills.\nPreferred certifications, or those a candidate is working toward, include OSCP, GPEN, GWAPT, or GXPN; OSWE, CRTP, or CBBH; and a recognized cloud security or cloud penetration testing certification such as an AWS or Azure security credential.\nMisc: This is an onsite role at Abbott location Madison; WI This is not a remote role/opportunity.\n\nApply Now\n\nLearn more about our health and wellness benefits, which provide the security to help you and your family live full lives: www.abbottbenefits.com\nFollow your career aspirations to Abbott for diverse opportunities with a company that can help you build your future and live your best life. Abbott is an Equal Opportunity Employer, committed to employee diversity.\nConnect with us at www.abbott.com, on Facebook at www.facebook.com/Abbott, and on Twitter @AbbottNews.\n\nThe base pay for this position is $61,300.00 – $122,700.00. In specific locations, the pay range may vary from the range posted.","company":"Abbot","rawCompany":"abbot","city":"Madison","state":"WI","isRemote":false,"isActive":false,"createdAt":"2026-09-04T09:59:24.295Z","occupations":[{"code":"15-1212.00","title":"Information Security Analysts","slug":"information-security-analysts"},{"code":"15-1299.05","title":"Information Security Engineers","slug":"information-security-engineers"},{"code":"15-1299.04","title":"Penetration Testers","slug":"penetration-testers"}],"industries":[{"code":"541512","title":"Computer Systems Design Services","slug":"computer-systems-design-services"},{"code":"541519","title":"Other Computer Related Services","slug":"other-computer-related-services"},{"code":"334111","title":"Electronic Computer Manufacturing","slug":"electronic-computer-manufacturing"}],"jobPosting":{"@context":"https://schema.org","@type":"JobPosting","title":"Offensive Security Analyst","description":"Abbott is a global healthcare leader that helps people live more fully at all stages of life. Our portfolio of life-changing technologies spans the spectrum of healthcare, with leading businesses and products in diagnostics, medical devices, nutritionals and branded generic medicines. Our 122,000 colleagues serve people in more than 160 countries.\n\nWorking at Abbott\n\nAt Abbott, you can do work that matters, grow, and learn, care for yourself and your family, be your true self, and live a full life. You’ll also have access to:\n\nCareer development with an international company where you can grow the career you dream of.\nEmployees can qualify for free medical coverage in our Health Investment Plan (HIP) PPO medical plan in the next calendar year.\nAn excellent retirement savings plan with a high employer contribution\nTuition reimbursement, the Freedom 2 Save student debt program, and FreeU education benefit - an affordable and convenient path to getting a bachelor’s degree.\nA company recognized as a great place to work in dozens of countries worldwide and named one of the most admired companies in the world by Fortune.\nA company that is recognized as one of the best big companies to work for as well as the best place to work for diversity, working mothers, female executives, and scientists.\n\nThe Opportunity\n\nThe Offensive Security Analyst supports Abbott’s Enterprise Cybersecurity Operations, Red Team Operations program by executing authorized penetration tests, supporting adversary emulation and purple team exercises, and validating vulnerabilities across internal and external assets. Working within defined methodologies, scope, and Rules of Engagement, the analyst develops hands on offensive security expertise while producing clear, actionable findings that measurably improve Abbott’s security posture. The role emphasizes technical execution, continuous skill development, and safe, ethical testing within a regulated healthcare environment.\n\nThis position reports to the Manager of Red Team Operations within Enterprise Cybersecurity and supports offensive security testing across Abbott’s enterprise technology environment. Responsibilities emphasize hands on execution and technical skill development under senior oversight, with exposure to purple team operations, vulnerability validation, cloud and identity attack paths, and emerging threat areas. The analyst is expected to grow toward performing standard assessments with increasing independence.\n\nAbbott operates in a regulated healthcare and medical device environment, so testing may involve sensitive data, including PHI, and patient adjacent or clinical systems. The analyst is expected to minimize captured sensitive data, store evidence only in approved locations, coordinate testing windows to limit operational impact, and comply with all applicable authorization, privacy, and regulatory requirements.\n\nWhat You’ll Do\n\nOffensive testing and adversary emulation\n\nThe analyst plans and executes authorized penetration tests against Abbott owned assets, including web applications, APIs, network infrastructure, and cloud environments, within approved scope and Rules of Engagement. This includes supporting purple team adversary emulation exercises by assisting with scenario development, executing ATT&CK mapped tactics, techniques, and procedures, validating detection and response coverage alongside defensive teams, and documenting lessons learned. The analyst supports red team and objective based engagements under senior direction and contributes to specialized assessments.\n\nVulnerability validation\n\nThe analyst performs vulnerability validation and exploit feasibility assessments to confirm real-world risk and reduce false positives before remediation prioritization. Individual weaknesses are analyzed and chained into meaningful attack paths mapped to MITRE ATT&CK, OWASP, and CWE, and the analyst develops and safely tests proof of concept exploits within authorized environments.\n\nReporting and communication\n\nThe analyst produces clear, structured assessment reports and executive summaries with supporting evidence, CVSS based severity justification, business risk context, and actionable remediation guidance. The role supports post engagement readouts, knowledge transfer sessions, and remediation discussions with application owners and IT teams, and translates technical findings for both technical and non-technical audiences.\n\nCollaboration and program contribution\n\nThe analyst collaborates with the Incident Response, Threat Intelligence, Vulnerability Management, Detection Engineering, and Cybersecurity Architecture teams, and contributes to service metrics and dashboards that track testing coverage, vulnerability trends, and detection effectiveness over time. The role also contributes to team methodology, tooling, playbooks, and documentation held in SharePoint, Git, and wiki resources.\n\nProfessional conduct and development\n\nThe analyst operates strictly within authorization, scope, Rules of Engagement, and legal and ethical boundaries, exercising discretion when handling highly sensitive data, including PHI, and patient-adjacent or clinical systems. Complex, novel, or high risk findings are escalated promptly with appropriate documentation. The analyst continuously develops offensive security skills through self-directed learning, labs, and research, maintaining growing proficiency with standard tooling such as Burp Suite, Nmap, BloodHound, and content-discovery tools.\n\nEducation and Experience You’ll Bring\n\nRequired Qualifications\n\nA bachelor’s degree in Cybersecurity, Information Security, Computer Science, Information Technology, or a related field is expected, or equivalent practical experience and certifications.\nCandidates typically bring one to three years of relevant cybersecurity experience, and internship, co-op, or applied academic and lab experience will be considered.\nWorking knowledge of Windows and Linux operating systems, networking fundamentals, and Active Directory concepts.\nFamiliarity with offensive security frameworks and standards such as MITRE ATT&CK, OWASP, PTES, CWE, and CVSS.\n Exposure to scripting or automation such as Python, PowerShell, or Bash.\n\nPreferred Qualifications\n\nFoundational knowledge of web technologies, including HTTP and HTTPS, REST APIs, and authentication mechanisms, and of common vulnerability classes such as the OWASP Top 10.\nCandidates should have hands-on familiarity with core offensive security tooling such as Burp Suite, Nmap, Metasploit, and Kali Linux, or demonstrable applied lab proficiency and clear intent to develop these skills.\nPreferred certifications, or those a candidate is working toward, include OSCP, GPEN, GWAPT, or GXPN; OSWE, CRTP, or CBBH; and a recognized cloud security or cloud penetration testing certification such as an AWS or Azure security credential.\nMisc: This is an onsite role at Abbott location Madison; WI This is not a remote role/opportunity.\n\nApply Now\n\nLearn more about our health and wellness benefits, which provide the security to help you and your family live full lives: www.abbottbenefits.com\nFollow your career aspirations to Abbott for diverse opportunities with a company that can help you build your future and live your best life. Abbott is an Equal Opportunity Employer, committed to employee diversity.\nConnect with us at www.abbott.com, on Facebook at www.facebook.com/Abbott, and on Twitter @AbbottNews.\n\nThe base pay for this position is $61,300.00 – $122,700.00. In specific locations, the pay range may vary from the range posted.","datePosted":"2026-09-04T09:59:24.295Z","dateModified":"2026-09-04T09:59:24.295Z","hiringOrganization":{"@type":"Organization","name":"Abbot","sameAs":"https://jobsearcher.com"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Madison","addressRegion":"WI","addressCountry":"US"}},"identifier":{"@type":"PropertyValue","name":"JobSearcher","value":"79b8a7680a6ef2880d4e1cef"},"url":"https://jobsearcher.com/jobs/79b8a7680a6ef2880d4e1cef"}}