Cyber Exposure Management Analyst

Cyber Exposure Management Analyst

Employment Type: Full-Time
Experience Level: Analyst / Experienced Professional
Experience Required: 3–5 years

About the Role

We are seeking a Cyber Exposure Management Analyst to coordinate the enterprise vulnerability and exposure management lifecycle. This role will identify and assess cyber exposures, establish risk-based priorities, collaborate with asset owners on remediation, and validate that corrective actions effectively reduce risk.

The ideal candidate has hands-on experience in vulnerability management and understands asset criticality, external exposure, misconfigurations, threat activity, and potential attack paths across infrastructure, endpoints, cloud, identity, applications, and network environments.

Key Responsibilities

• Coordinate the vulnerability management lifecycle, including asset discovery, assessment, prioritization, remediation, validation, exceptions, and closure.
• Operate and optimize vulnerability and exposure management platforms across servers, endpoints, network infrastructure, cloud workloads, applications, and containers.
• Prioritize vulnerabilities based on exploitability, external reachability, asset criticality, business impact, and available mitigations.
• Partner with Security Operations and Incident Response teams to evaluate actively exploited vulnerabilities, zero-days, and major security advisories.
• Collaborate with infrastructure, cloud, application, identity, and security teams to drive timely remediation.
• Track risk exceptions, compensating controls, accountable owners, review dates, and governance approvals.
• Identify internet-facing assets and potential attack paths to critical systems.
• Assess the impact of emerging threats on enterprise assets and coordinate urgent remediation through closure.
• Support exposure management initiatives involving cloud services, applications, containers, APIs, software dependencies, and AI-enabled technologies.
• Develop reports covering asset coverage, critical and exploited exposures, overdue remediation, verified closures, and open exceptions.
• Automate vulnerability enrichment, correlation, ticket creation, and reporting when appropriate.
• Support vulnerability management policies, remediation SLAs, risk acceptance processes, security standards, audits, and control requirements.

Required Qualifications

• 3–5 years of professional experience in cybersecurity, vulnerability management, exposure management, security engineering, security operations, or a related field.
• Experience coordinating vulnerability management activities and working with asset owners through remediation and closure.
• Hands-on experience with platforms such as Tenable, Qualys, Rapid7, Microsoft Defender Vulnerability Management, or similar technologies.
• Knowledge of CVEs, CVSS, CISA KEV, EPSS, attack vectors, compensating controls, risk acceptance, and remediation validation.
• Experience assessing vulnerabilities across Windows and Linux systems, network infrastructure, applications, and enterprise technologies.
• Ability to interpret security advisories, exploit information, threat intelligence, and technical research.
• Strong understanding of networking, operating systems, authentication, access control, patching, system hardening, and common attack techniques.
• Strong analytical, organizational, and communication skills.
• Ability to explain technical risks and priorities to technical and non-technical stakeholders.

Preferred Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Information Systems, or a related field; equivalent experience will also be considered.
• Security or cloud certifications.
• Experience with cloud, container, application, or external attack surface security.
• Experience integrating vulnerability platforms with CMDB, SIEM, SOAR, EDR/XDR, ticketing, cloud security, or asset management platforms.
• Familiarity with risk-based prioritization, asset inventory, attack paths, and security frameworks.
• Experience with scripting and automation for security operations.
• Professional-level english proficiency

Skills and Abilities

• Advanced problem-solving and analytical skills.
• Clear and effective communication.
• Ability to collaborate with stakeholders at different organizational levels.
• Self-motivated and capable of working with minimal supervision.
• Ability to handle sensitive asset and vulnerability information appropriately.
• Strong follow-through and attention to detail.
• Ability to build trusted relationships and maintain accurate remediation data.

Apply today to join a cybersecurity team focused on reducing enterprise risk through practical, intelligence-driven exposure management.

Sueldo: $55,000.00 al mes

Pregunta(s) de postulación:

• ¿Qué nivel de inglés dominas?
• ¿Qué plataformas de gestión de vulnerabilidades has utilizado —por ejemplo, Tenable, Qualys, Rapid7 o Microsoft Defender— y en qué tipo de activos las has aplicado?

Lugar de trabajo: Empleo remoto