Attack Surface Reduction Senior Analyst

Attack Surface Reduction Analyst

Key Responsibilities

• Conduct comprehensive

  vulnerability assessments (VA)

  and

  penetration tests (PT)

  on systems, applications, and networks.
• Identify and assess security vulnerabilities using

  industry-standard tools and methodologies

  .
• Design and manage

  vulnerability management processes

  and drive effective remediation strategies.
• Coordinate and manage

  third-party penetration testing engagements

  and ensure alignment with security goals.
• Collaborate with IT and business teams to prioritize and remediate identified risks.
• Contribute to the development and maintenance of

  security policies, procedures, and standards

  .
• Continuously

  monitor systems

  for unauthorized access, suspicious activities, and emerging threats.
• Stay abreast of evolving

  cybersecurity trends

  , threat landscapes, and best practices in

  attack surface reduction

  .

Required Qualifications

• Bachelors degree

  in Computer Science, Information Security, or related field.

• 3 to 5 years

  of hands-on experience in

  vulnerability scanning

  ,

  penetration testing

  , and

  vulnerability management

  .
• In-depth knowledge of

  common vulnerabilities and exposures (CVEs)

  and attack vectors.
• Proficiency with tools such as

  Kali Linux, Qualys, Burp Suite

  , and other VA/PT platforms.
• Familiarity with

  security frameworks and standards

  (eg, NIST, OWASP Top 10, CIS Controls).
• Strong analytical and

  problem-solving skills

  .
• Excellent written and verbal

  communication skills

  , including the ability to explain technical issues to non-technical stakeholders.

(Certifications are a plus but not mandatory)

• OSCP