Cybersecurity Analyst

Founded in 1920, Eastman is a global specialty materials company that produces a broad range of products found in items people use every day. With the purpose of enhancing the quality of life in a material way, Eastman works with customers to deliver innovative products and solutions while maintaining a commitment to safety and sustainability. The company’s innovation-driven growth model takes advantage of world-class technology platforms, deep customer engagement, and differentiated application development to grow its leading positions in attractive end markets such as transportation, building and construction, and consumables. As a globally inclusive company, Eastman employs approximately 13,000 people around the world and serves customers in more than 100 countries. The company had 2025 revenue of approximately $8.8 billion and is headquartered in Kingsport, Tennessee, USA. For more information, visit www.eastman.com.

Role Description

The Red Team Security Specialist simulates real-world cyberattacks to evaluate and improve an organization’s security posture. This role focuses on identifying vulnerabilities in systems, networks, applications, and human processes by ethically exploiting them helping organizations strengthen defenses proactively.

Key Responsibilities:

• Conduct penetration testing on networks, applications, APIs, cloud environments, and endpoints to uncover exploitable vulnerabilities and validate security controls. Each engagement should include scoping, threat modelling, exploitation where permitted, and clear evidence of impact.

• Perform social engineering exercises (phishing, vishing, pretexting, physical social engineering where allowed) to evaluate human and process risk while following legal and organizational approval processes. All social engineering must be carefully scoped, authorized, and documented.

• Apply strong knowledge of network architecture, protocols, segmentation, firewalls, VPNs, routing, and switching to assess network security posture and identify potential attack paths.

• Use scripting and programming skills to automate testing, build custom tools, support exploit validation, and improve pentesting efficiency.

• Simulate advanced threat scenarios and full-scale red team engagements to evaluate detection, response, and resilience.

• Identify security weaknesses using a mix of manual testing and automated tools, validating findings to reduce false positives and demonstrate real attack ability. Prioritize risky findings by exploitability and business impact.

• Plan and conduct full-scale red team engagements across enterprise environments, coordinating with stakeholders, managing timelines, and adapting to live defensive responses. Maintain operational discipline and proper approvals throughout engagements.