Cybersecurity Analyst – Attack Surface Management & Attack Path Analysis
Core
Own and continuously evolve the enterprise external attack surface inventory, model attack paths across hybrid infrastructure, and build dashboards for security posture and risk.
Role type
Senior IC cybersecurity analyst (attack surface management & attack path analysis)
Builds
Unified asset inventory, attack path models, and executive security dashboards
Domain
Cybersecurity, Cloud Security, Enterprise Risk Management
Deliverable
production ML models | dashboards & analysis | infrastructure
Required skills
Attack surface management (EASM), Attack path modeling, Cloud security (AWS/Azure/GCP), Python scripting, MITRE ATT&CK framework, API integration, Asset criticality modeling
Preferred skills
CISSP, CISM, CISA, CEH, OSCP, AWS Security Specialty, Microsoft AZ-500, (ISC)² CCSP
Technologies
Python, REST APIs, CAASM, Entra ID, Active Directory, MITRE ATT&CK, EASM tooling
Responsibilities
Discover and investigate unauthorized or misconfigured assets; Model attack paths and prioritize remediation based on criticality; Build dashboards and automation for security posture; Partner with red/purple teams and cross-functional security groups
Seniority
Senior, hands-on IC
