About OffSec

Founded in 2007 by the creators of Kali Linux, OffSec (formerly known as Offensive Security) is the leading provider of continuous professional and workforce development, training, and education for cybersecurity practitioners. OffSec’s distinct pedagogy and practical, hands-on learning help organizations fill the infosec talent gap by training their teams on today’s most critical skills.

Become a part of our global presence and work from anywhere. With team members in over 40 countries, we believe in inspiring people of all backgrounds and communities. The OffSec team is composed of diverse, internationally published authors, conference speakers, and seasoned information technology professionals from both the private sector and governments worldwide.

Excited about our mission and what we do? Apply and join us!

About the Job

We are seeking a talented Business Analyst to join our Content Strategy team in the cybersecurity training and workforce development industry. As a Business Analyst for the Content team, you will play a critical role in driving our strategic initiatives forward by conducting comprehensive competitive and market analysis, building business cases, scoping documents, and creating sales enablement materials around our online learning content.

Our team is growing and needs individuals with the grit to inspire, craft, and execute amazing new visions for our training product portfolio. Come be a partner with our Content, Product, and Marketing teams, help create the future of cybersecurity workforce development, training and education products, and deliver delightful learning experiences for our learners and customers..

Excited about our mission and what we do? Apply and join us!

Duties and responsibilities

Conduct thorough competitive analysis to identify market trends, strengths, weaknesses, opportunities, and threats.
Perform market analysis to identify emerging trends, customer needs, and potential areas for growth.
Develop business cases for new product offerings, features, or enhancements based on market research and analysis.
Create scoping documents outlining project requirements, objectives, timelines, and resource needs.
Collaborate with cross-functional teams to gather input and align on project goals and deliverables.
Design and develop sales enablement materials, including presentations, collateral, and other resources to support the sales team.
Stay informed about industry developments, emerging technologies, and competitive offerings to inform decision-making and strategy.
Provide insights and recommendations to senior management based on analysis and findings.
Work independently and proactively to drive projects forward, while also collaborating effectively with team members.
Understand company and product strategy and develop business cases for the Content Development team
Gain a deep understanding of values we want to deliver to our learners and customers
Understand business outcomes sufficiently well in our content roadmap to be able to help prioritize items to drive the biggest business impact
Demonstrate an unwavering commitment to excellence, team culture, and living the OffSec values

Qualifications

Minimum of 2 - 3 years of experience as a business analyst for a high growth B2B or B2C ecommerce products, experience with SaaS products, LMS, online training products highly desired.
Background in CyberSecurity market analysis is preferred
Strong analytical skills with the ability to gather, analyze, and interpret data from various sources.
Must have previous experience in a consulting firm.
Excellent written and verbal communication skills, with the ability to effectively communicate complex concepts to diverse audiences.
Technical competency in cybersecurity or IT is strongly preferred
Creative thinking and problem-solving skills.
Comfortable working in a fully remote environment
Good business acumen in understanding business outcomes and how to deliver business impact through content and product strategy
Experience with e-learning platform, management consulting, and business school education highly appreciated
Results-oriented, self-motivated, proactive self-starter with a passion for delivering high quality software in a high-performance team environment

Working conditions

This position is for work from home
This position requires accessibility to Offensive Security systems and interfaces, and adherence to all security protocols and policies.

Direct reports

This position has no direct reports.

EEO

OffSec provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.

This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.

Apply for this Job

* Required

First Name *

Last Name *

Email *

Phone *

Location (City) *

Resume/CV *

Dropbox Google Drive

(File types: pdf, doc, docx, txt, rtf)

Cover Letter *

Dropbox Google Drive

(File types: pdf, doc, docx, txt, rtf)

When autocomplete results are available use up and down arrows to review

+ Add another education

LinkedIn Profile *

Location *

How did you hear about this job? *

How many years of experience do you have, working professionally in a Business Analyst position? *

  0
  1-2
  3-4
  4-5
  5+

What are your salary expectations for a position like this? *

When are you looking to start? *

Please read and acknowledge our Applicant Privacy Notice. *

What’s the purpose of this document?

This document tells you how we will process your personal information when you apply for any roles or work with the Offensive Security group of companies (“roles”).

Who are we?

These members of the Offensive Security group of companies are "data controllers".

Role Location	Data Controller
USA	Offensive Security Services, LLC located in the USA
Philippines	Offensive Security Certifications, Inc. located in the Philippines
Rest of World	OffSec Services Limited located in Gibraltar

In this privacy notice OffSec will refer to these legal entities as “OffSec”, “we” or “us” and for convenience, you can contact any of them by emailing privacy@offensive-security.com.

As data controller OffSec decides how we hold and use personal information about you. You are being sent a copy of this privacy notice because you are applying for a role with us (whether as an employee, worker or contractor). It makes you aware of how and why your personal data will be used. It provides you with certain information that must be provided under the General Data Protection Regulation ((EU) 2016/679) (GDPR).

Data protection principles

OffSec will comply with data protection law and principles, so your data will be:

used lawfully, fairly and in a transparent way.
collected only for valid purposes we have clearly explained to you and not used in any way that is incompatible with those purposes.
relevant to the purposes we have told you about and limited only to those purposes.
accurate and kept up to date.
kept only as long as necessary for the purposes we have told you about.
kept securely.

The information we hold about you

In connection with your application for a role, OffSec will collect, store, and use these categories of personal information about you:

the information you have provided to us in your CV and any covering letter or email.
the information you have provided on your application, including name, title, address, telephone number, personal email address, date of birth, gender, employment history, qualifications.
other information you enter into our recruitment platform operated by Greenhouse Software, Inc (“Greenhouse”).
any information you provide to us during an interview.

We may also collect, store and use these types of sensitive personal information:

information about your race or ethnicity.
information about your health, including any medical condition, health and sickness records.
information about criminal convictions and offences.

How is your personal information collected?

We collect personal information about candidates from the following sources:

you, the candidate.
recruitment agencies.
background check providers.
credit reference agencies.
your named referees.
our third-party contacts whose opinion of you we may ask.
data from publicly accessible sources such a LinkedIn and other public websites, social media sites and blogs.

How OffSec will use information about you

OffSec will use the personal information we collect about you to:

assess your skills, qualifications, and suitability for a role.
carry out background and reference checks.
communicate with you about the recruitment process.
keep records related to our hiring processes.
help defend us against any claims.
comply with legal or regulatory requirements.

Our legal basis for processing your information

It is in our legitimate interests to process your personal information to decide whether to appoint you to a role and to decide whether to contract with you. If you are appointed to a role, it is also in our legitimate business interests to use your personal information for staff administration purposes.

Having received your application, OffSec will then process that information to decide whether you meet the basic requirements to be shortlisted for the role. If you do, OffSec will decide whether your application is strong enough to invite you for an interview. If we call you for an interview, OffSec will use the information you provide to us at the interview to decide whether to offer you the role. If we offer you the role, OffSec will then take up references and carry out background checks before confirming your appointment.

If you fail to provide personal information

If you fail to provide information which is necessary for us to consider your application (such as evidence of qualifications or work history), OffSec cannot process your application successfully. For example, if we require a credit check or references for this role and you fail to provide us with relevant details, OffSec cannot take your application further. This also applies if you supply information and then ask for it to be erased.

How we use sensitive personal information

OffSec will use your sensitive personal information in these ways:

OffSec will use information about your disability status to consider whether we need to provide adjustments during the recruitment process.
OffSec will use information about your race or national or ethnic origin to ensure meaningful equal opportunity monitoring and reporting.
OffSec will use information about any criminal convictions as set out below.

Information about criminal convictions

We envisage that OffSec may process information about any criminal convictions.

OffSec operates in an industry that requires high trust and integrity and so we may ask you to disclose your criminal records history.

OffSec will collect information about criminal convictions if we would like to offer you the role (conditional on checks and any other conditions, such as references, being satisfactory). We may carry out a criminal records and other background check to satisfy ourselves there is nothing in your history which makes you unsuitable for the role.

Automated decision-making

You will not be subject to decisions that will have a significant impact on you based solely on automated decision-making.

Data sharing

Why might you share my personal information with third parties?

OffSec will only share your personal information with these third parties to process your application: other members of our group of companies, third party service providers including Greenhouse, recruitment agencies, referees, background checking organisations and other service providers. All our third-party service providers and other entities in our group must take appropriate security measures to protect your personal information in line with our policies. We do not allow our third-party service providers to use your personal data for their own purposes. We only permit them to process your personal data for specified purposes and under our instructions.

Data security

We have put in place appropriate security measures to prevent your personal information from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal information to those employees, agents, contractors and other third parties with a business need-to-know it for the purpose of your application for a role. They will only process your personal information on our instructions, and they are subject to a duty of confidentiality.

We have put in place procedures to deal with any suspected data security breach and will notify you and any applicable regulator of a suspected breach where we are legally required to do so.

International data transfers

Your personal information will be stored in databases used by those at OffSec involved in considering your application for any role. OffSec uses manual files, spreadsheets, access databases and the like, to manage and store your personal information. OffSec also uses the cloud-based software platform provided by Greenhouse.

Your personal information will be kept by OffSec (either primarily or as a back-up system) in the USA or the Philippines. Your personal information will therefore be transferred to and accessible by OffSec and its group companies for the purposes outlined above in these countries. Your personal information may therefore be located in countries other than the country in which your personal information was originally collected. The laws in those countries may not provide the same level of data protection compared to the country in which you initially provided your information. Nevertheless, when we transfer your personal information to recipients in other countries, we will protect that information in compliance with law

Data retention

How long will you use my information for?

If you are unsuccessful with your application, OffSec will retain your personal information for 12 months after we have communicated our decision to you. We retain your personal information for that period in case another role arises that you may be suitable for and so we can show that we have not discriminated against candidates and that we have conducted the recruitment exercise in a fair and transparent way. After this period, OffSec will securely destroy your personal information unless we determine that its in our legitimate interest to keep it for longer. In general, this will be because we think you may be suitable for another role with us and would like to be able to contact you again. You can request us to erase your data at any time.

If you are successful with your application, we will keep your personal information for the purpose of staff administration for so long as it’s in our legitimate interest to do so.

Rights of access, correction, erasure, and restriction

Your rights in connection with personal information

Under certain circumstances, by law you have the right to:

Request access to your personal information (commonly known as a "data subject access request"). This enables you to receive a copy of the personal information we hold about you and to check we are lawfully processing it.
Request correction of the personal information we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected.
Request erasure of your personal information. This enables you to ask us to delete or remove personal information where there is no good reason for us continuing to process it. You may also ask us to delete or remove your personal information where you have exercised your right to object to processing (see below).
Object to processing of your personal information as we are relying on our legitimate interest and there is something about your particular situation which makes you want to object to processing on this ground. You may also object where we are processing your personal information for direct marketing purposes.
Request the restriction of processing of your personal information. This enables you to ask us to suspend the processing of personal information about you, for example if you want us to establish its accuracy or the reason for processing it.
Request the transfer of your personal information to another party.

If you want to review, verify, correct or request erasure of your personal information, object to the processing of your personal data, or request we transfer a copy of your personal information to another party, please contact privacy@offensive-security.com.

Questions?

If you have questions about this privacy notice or wish to contact us about anything related to it, please contact privacy@offensive-security.com.

I acknowledge that I have read and agree to Offensive Security's Applicant Privacy Notice

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey. Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiring process or thereafter. Any information that you do provide will be recorded and maintained in a confidential file.

As set forth in OffSec’s Equal Employment Opportunity policy, we do not discriminate on the basis of any protected group status under any applicable law.

Gender

Are you Hispanic/Latino?

Please identify your race

Race & Ethnicity Definitions

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection. As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measure the effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categories is as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.

Veteran Status

Voluntary Self-Identification of Disability

Form CC-305

Page 1 of 1

OMB Control Number 1250-0005

Expires 04/30/2026

Why are you being asked to complete this form?

We are a federal contractor or subcontractor. The law requires us to provide equal employment opportunity to qualified people with disabilities. We have a goal of having at least 7% of our workers as people with disabilities. The law says we must measure our progress towards this goal. To do this, we must ask applicants and employees if they have a disability or have ever had one. People can become disabled, so we need to ask this question at least every five years.

Completing this form is voluntary, and we hope that you will choose to do so. Your answer is confidential. No one who makes hiring decisions will see it. Your decision to complete the form and your answer will not harm you in any way. If you want to learn more about the law or this form, visit the U.S. Department of Labor’s Office of Federal Contract Compliance Programs (OFCCP) website at www.dol.gov/ofccp.

How do you know if you have a disability?

A disability is a condition that substantially limits one or more of your “major life activities.” If you have or have ever had such a condition, you are a person with a disability. Disabilities include, but are not limited to:

Alcohol or other substance use disorder (not currently using drugs illegally)
Autoimmune disorder, for example, lupus, fibromyalgia, rheumatoid arthritis, HIV/AIDS
Blind or low vision
Cancer (past or present)
Cardiovascular or heart disease
Celiac disease
Cerebral palsy
Deaf or serious difficulty hearing
Diabetes
Disfigurement, for example, disfigurement caused by burns, wounds, accidents, or congenital disorders
Epilepsy or other seizure disorder
Gastrointestinal disorders, for example, Crohn's Disease, irritable bowel syndrome
Intellectual or developmental disability
Mental health conditions, for example, depression, bipolar disorder, anxiety disorder, schizophrenia, PTSD
Missing limbs or partially missing limbs
Mobility impairment, benefiting from the use of a wheelchair, scooter, walker, leg brace(s) and/or other supports
Nervous system condition, for example, migraine headaches, Parkinson’s disease, multiple sclerosis (MS)
Neurodivergence, for example, attention-deficit/hyperactivity disorder (ADHD), autism spectrum disorder, dyslexia, dyspraxia, other learning disabilities
Partial or complete paralysis (any cause)
Pulmonary or respiratory conditions, for example, tuberculosis, asthma, emphysema
Short stature (dwarfism)
Traumatic brain injury

Disability Status

PUBLIC BURDEN STATEMENT: According to the Paperwork Reduction Act of 1995 no persons are required to respond to a collection of information unless such collection displays a valid OMB control number. This survey should take about 5 minutes to complete.

Our system has flagged this application as potentially being associated with bot traffic. Please turn off any VPNs, clear your browser cache and cookies, or try submitting your application in a different browser. If this issue persists, please reach out to our support team via our help center.

Please complete the reCAPTCHA above.