Senior Cyber Security Analyst

Senior Cyber Security Analyst.

Remote.

9am-5pm day hours.

To support 2026 Surge project (AS cyber alignment), these positions will be responsible for ASMR initiative(s). This initiative will be supporting EVM-TEM-ASM, a team of 7 analysts (from junior international support to principal analyst).  Currently, the team has 2 principal analysts, no senior analysts (1 backfill pending), 3 standard analysts and 2 junior analysts.  The groups are all multifunction support from light pen testing, some custom development, and  steeps in standard cyber/ ASM analysis for escalation with some incident management is skills. The candidate should: 

Demonstrated Attack Surface Reduction skills including vulnerability identification, classification, rating, and reporting. Knowledge and usage of multiple scanning and patching platforms required. Strong documentation skills are needed. 

Scope of Work:

• Asset Coverage 
• Expand and validate external asset inventory across designated scope 
• Ensure completeness and accuracy of ASM visibility Seeding & Validation 
• Execute continuous validation of attack surface discovery 
• Identify gaps in existing tooling and coverage Vulnerability Classification & Prioritization 
• Triage and classify findings into P0 / P1 (primary) and secondary tiers 
• Apply risk-based context to improve remediation prioritization Execution Throughput 
• Increase population completed per month 
• Drive full vulnerability burndown per entity within each wave Monitoring & Escalation 
• Continuous monitoring of active exposures 
• Proactive escalation of high-risk vulnerabilities 

Skill Profile: We require experienced ASM practitioners with proven capability in: Vulnerability identification, classification, rating, and reporting. Working across multiple ASM, scanning, and patching platforms. Strong technical background in: Incident Response, Threat Hunting, Threat Intelligence with deeper understanding of exploitability and real-world risks. 

The top responsibility for this position is ID of ASM risks that require remediation, background should include cyber security analysis and incident response.  Background should include extensive (5 or more years) in cyber incidents, collaboration and cross function support.  The hiring process will be at least 2 video interviews, including 1:1 or panel with a technical assessment and behavioral style.