Cybersecurity Analyst

Technical Skills Required

Each of the following is applied daily and will be probed directly in interview. The bar is working fluency, not familiarity.

·       DNS: Trace a name to its terminal resource across CNAME and delegation chains, and recognize when it resolves to infrastructure Humana no longer controls (dangling records, stale delegation, takeover-eligible targets)

·       TLS and certificates: Read a certificate to establish what it actually covers and who issued it; use SAN entries and certificate transparency logs to discover hosts absent from inventory; separate simple expiration from misissuance

·       Web and network exposure: Judge from HTTP responses, headers, and service banners what an endpoint is, whether it is authenticated, and whether reaching it is real exposure, rather than reporting an open port on its own

·       Cloud exposure: Explain how an AWS, Azure, or Google Cloud Platform resource became publicly reachable (storage ACLs, security group and network rules, unauthenticated endpoints), and use resource tags and naming conventions to attribute it to an owner

·       Vulnerability analysis: Confirm whether a reported CVE applies to the deployed version and configuration, and defend a severity that departs from the CVSS base score when reachability or compensating controls justify it

·       Scripting: Query a REST API, parse JSON and CSV, and reconcile two asset lists without doing it by hand. Python preferred. The bar is automating repetitive work, not software engineering

──────────────────────────────

Required Qualifications

·       Bachelor's degree in Computer Science, Cybersecurity, or a related field, or equivalent hands-on cybersecurity experience

·       2 to 4 years of experience in vulnerability management, attack surface management, security operations, or a comparable technical security analyst role

·       Working knowledge of internet-facing asset types (DNS, certificates, cloud-hosted services, SaaS) and the specific ways they become exposed or misconfigured

·       Demonstrated ability to independently investigate and validate a security finding to technical conclusion without close supervision. This role expects exceptional execution at a mid-level experience band

·       Experience with vulnerability or ticketing systems (ServiceNow or equivalent) for issue tracking and SLA management

·       Strong written communication skills, specifically the ability to translate a technical finding into remediation guidance that a non-specialist asset owner can act on

·       Comfort working directly with asset-owning engineering teams to drive remediation, including following up on stalled or disputed tickets

·       Ability to ramp quickly within an established enterprise process rather than requiring a greenfield program to be built