[Remote] Cybersecurity Analyst, External Attack Surface Management

Note: The job is a remote job and is open to candidates in USA. Saisystems Technology is hiring a Cybersecurity Analyst focused on external attack surface management. The role involves investigating and validating security findings, translating them into remediation guidance, and working with engineering teams to drive remediation.

Skills

• Bachelor's degree in Computer Science, Cybersecurity, or a related field, or equivalent hands-on cybersecurity experience
• 2 to 4 years of experience in vulnerability management, attack surface management, security operations, or a comparable technical security analyst role
• Working knowledge of internet-facing asset types (DNS, certificates, cloud-hosted services, SaaS) and the specific ways they become exposed or misconfigured
• Demonstrated ability to independently investigate and validate a security finding to technical conclusion without close supervision
• Experience with vulnerability or ticketing systems (ServiceNow or equivalent) for issue tracking and SLA management
• Strong written communication skills, specifically the ability to translate a technical finding into remediation guidance that a non-specialist asset owner can act on
• Comfort working directly with asset-owning engineering teams to drive remediation, including following up on stalled or disputed tickets
• Ability to ramp quickly within an established enterprise process rather than requiring a greenfield program to be built
• Prior hands-on experience with an EASM or attack surface management platform (Ionix, Censys, Microsoft Defender External Attack Surface Management, or similar)
• Familiarity with IT asset inventory and cloud tagging practices (AWS, Azure, GCP) in support of ownership attribution
• Experience in a large, multi-subsidiary or acquisition-driven enterprise environment where asset ownership is frequently unclear or contested
• Working knowledge of MITRE ATT&CK and common web and network exploitation techniques
• Experience integrating security tooling output into enterprise systems via API, including ServiceNow or a SIEM platform
• Relevant certifications such as Security+, GWAPT, GCIH, OSCP, or equivalent demonstrated practical skill

Company Overview