Cybersecurity Analyst - Attack Surface Management

This role will focus on discovering and inventorying assets, monitoring internal and external attack surfaces, identifying vulnerabilities, and partnering with technical teams to reduce cyber risk across on-premises and cloud environments. We are seeking a Cybersecurity Analyst - Vulnerability & Attack Surface Management to help strengthen the organization's security posture through proactive identification, assessment, and remediation of security risks.

Cybersecurity Analyst - Vulnerability & Attack Surface Management
Location: Minnesota | Remote
Compensation: $60-$80Hr

Position Summary

We are seeking a Cybersecurity Analyst - Vulnerability & Attack Surface Management to help strengthen the organization's security posture through proactive identification, assessment, and remediation of security risks. This role will focus on discovering and inventorying assets, monitoring internal and external attack surfaces, identifying vulnerabilities, and partnering with technical teams to reduce cyber risk across on-premises and cloud environments.

The ideal candidate will have 2-5 years of cybersecurity experience with a strong understanding of vulnerability management programs, attack surface analysis, asset discovery, and security exposure management.

Key Responsibilities of the Cybersecurity Analyst:

• 
  
• Perform continuous asset discovery and inventory management across enterprise environments.
• 
  
• Identify, track, and assess internal and external attack surfaces to uncover potential security exposure.
• 
  
• Conduct vulnerability assessments using industry-standard scanning tools and technologies.
• 
  
• Analyze vulnerability findings, prioritize remediation efforts based on risk, and work with infrastructure, cloud, and application teams to mitigate issues.
• 
  
• Monitor and maintain Attack Surface Management (ASM) platforms and security exposure management tools.
• 
  
• Evaluate cloud security configurations and posture using Cloud Security Posture Management (CSPM) solutions.
• 
  
• Develop risk-based reporting and dashboards to communicate security findings to leadership and technical stakeholders.
• 
  
• Assist with security audits, compliance initiatives, and cyber risk assessments.
• 
  
• Research emerging threats, vulnerabilities, and attack techniques to proactively identify organizational risks.
• 
  
• Collaborate with Security Operations, Infrastructure, Cloud Engineering, and Application teams to improve overall cyber resilience.
• 
  
• Support remediation validation and continuous improvement of vulnerability management processes.
• 
  

Required Qualifications of the Cybersecurity Analyst:

• 
  
• 2-5 years of experience in cybersecurity, vulnerability management, security operations, or related information security roles.
• 
  
• Experience with vulnerability scanning platforms such as:
  
  • 
    
  • Tenable Nessus
  • 
    
  • Rapid7 InsightVM
  • 
    
  • Qualys
  • 
    
  • Microsoft Defender Vulnerability Management
  • 
    
  
  
• 
  
• Experience with asset discovery and inventory management tools.
• 
  
• Familiarity with Attack Surface Management (ASM) methodologies and technologies.
• 
  
• Understanding of attack surface modeling and cyber exposure management concepts.
• 
  
• Experience working with cloud environments including AWS, Azure, or Google Cloud Platform.
• 
  
• Familiarity with Cloud Security Posture Management (CSPM) tools.
• 
  
• Understanding of common security frameworks including NIST Cybersecurity Framework, CIS Controls, and MITRE ATT&CK.
• 
  
• Knowledge of vulnerability scoring methodologies including CVSS.
• 
  
• Strong analytical, problem-solving, and communication skills.
• 
  

Preferred Qualifications of the Cybersecurity Analyst:

• 
  
• Experience with attack surface management platforms such as:
  
  • 
    
  • Microsoft Defender EASM
  • 
    
  • Palo Alto Networks Cortex Xpanse
  • 
    
  • Tenable Exposure Management
  • 
    
  • Rapid7 Exposure Command
  • 
    
  
  
• 
  
• Experience with security automation and scripting (PowerShell, Python, or Bash).
• 
  
• Relevant cybersecurity certifications including:
  
  • 
    
  • Security+
  • 
    
  • CySA+
  • 
    
  • GSEC
  • 
    
  • GIAC certifications
  • 
    
  • CISSP (preferred but not required)
  • 
    
  
  
• 
  
• Experience supporting cloud security initiatives and exposure management programs.
• 
  

Technical Skills of the Cybersecurity Analyst:

• 
  
• Asset Discovery & Inventory Management
• 
  
• Vulnerability Scanning & Assessment
• 
  
• Attack Surface Management (ASM)
• 
  
• External Attack Surface Monitoring (EASM)
• 
  
• Cloud Security Posture Management (CSPM)
• 
  
• Risk Prioritization & Remediation
• 
  
• Threat Analysis
• 
  
• Security Reporting & Metrics
• 
  
• Security Frameworks & Compliance Standards
• 
  

#LI-HP1 #INNOV2026