Lead Information Security Analyst, Vulnerability and External Attack Surface Management (T & I) (Telework/Hybrid)
Core
Lead the vulnerability management program and design/build the external attack surface management (EASM) service for a public service media organization.
Role type
Lead Information Security Analyst (Vulnerability & EASM)
Builds
External attack surface maps, vulnerability detection procedures, risk registers, and remediation plans.
Domain
Information Security / Cybersecurity / Public Service Media
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Vulnerability management lifecycle, External Attack Surface Management (EASM), Risk assessment, Security standards (ISO 27001, NIST, COBIT), Cloud security, Network security, Cryptography, Business continuity planning, Technical leadership, Compliance frameworks
Preferred skills
Zero-day response, Threat intelligence analysis, Security exemption adjudication, KPI/KRI definition
Technologies
WAF, Firewall, IDS/IPS, DNS, CVSS, MITRE ATT&CK
Responsibilities
Map the digital footprint (domains, IPs, cloud accounts, APIs), Implement continuous detection for exposed services/credentials, Lead the vulnerability life cycle (triage, prioritization, remediation), Define scanning strategies, Assess risk in context, Develop remediation plans, Lead zero-day response, Evaluate and adjudicate security exemptions, Manage the vulnerability risk register, Partner on compliance frameworks, Develop metrics and dashboards, Drive program evolution and threat intelligence
Seniority
Senior, hands-on IC with strategic ownership
