Senior Analyst – Attack Surface Management

Jobtailor; Kraków; On-site; PLN 180,000 - 250,000; Full time

Job summary

Jobtailor in Kraków, Poland seeks a seasoned cybersecurity professional to lead attack surface reconnaissance and vulnerability management across assets. The role emphasizes risk assessments, pen-testing validation, and mentoring junior analysts while driving automation with scripting and cloud platforms.

The ideal candidate has 4+ years in security operations or offensive security, strong cloud security expertise (Azure/GCP), and familiarity with ISO27001.

Qualifications

• Advanced knowledge of vulnerability management, OSINT, and adversary simulation.
• Strong expertise with tools like Kali Linux, Burp Suite, Tenable, and Splunk.
• Experience in cloud security assessment, particularly with Azure and GCP.
• Experienced with existing and new AI Models
• Understanding of regulatory frameworks such as ISO27001.
• More than 4 demonstrated experience in cybersecurity concentrating on security operations or offensive security.

Responsibilities

• Lead efforts in attack surface reconnaissance and asset identification.
• Manage a portion of the vulnerability management program, including onboarding new assets.
• Conduct in-depth analysis of security vulnerabilities and provide sophisticated risk assessments.
• Apply penetration testing techniques to validate and exploit security gaps.
• Mentor junior analysts and contribute to process improvements.
• Implement automation for attack surface monitoring using scripting and cloud-based solutions.
• Research emerging threats and implement countermeasures accordingly.
• Communicate risks and mitigation strategies to executive leadership.

Skills

Vulnerability Management

OSINT

Adversary Simulation

Penetration Testing

Risk Assessment

Automation Scripting

Cloud Security

AI Models

Regulatory Frameworks

Education

ISO27001

Tools

Kali Linux

Burp Suite

Tenable

Splunk

Azure

GCP

Job description

• Lead efforts in attack surface reconnaissance and asset identification.
• Manage a portion of the vulnerability management program, including onboarding new assets.
• Conduct in-depth analysis of security vulnerabilities and provide sophisticated risk assessments.
• Apply penetration testing techniques to validate and exploit security gaps.
• Mentor junior analysts and contribute to process improvements.
• Implement automation for attack surface monitoring using scripting and cloud-based solutions.
• Research emerging threats and implement countermeasures accordingly.
• Communicate risks and mitigation strategies to executive leadership.

Requirements

• Advanced knowledge of vulnerability management, OSINT, and adversary simulation.
• Strong expertise with tools like Kali Linux, Burp Suite, Tenable, and Splunk.
• Experience in cloud security assessment, particularly with Azure and GCP.
• Experienced with existing and new AI Models
• Understanding of regulatory frameworks such as ISO27001.
• More than 4 demonstrated experience in cybersecurity concentrating on security operations or offensive security.

Core Competencies

Demonstrates advanced knowledge in vulnerability management, OSINT, and adversary simulation, with a strong focus on cloud security assessment and regulatory compliance. Capable of leading security operations, conducting risk assessments, and mentoring junior analysts while implementing automation solutions.

Highest-signal resume keywords

• Vulnerability Management
• Penetration Testing
• Cloud Security Assessment
• Kali Linux
• Burp Suite

ATS Optimization Keywords

Hard Skills

• Vulnerability Management
• OSINT
• Adversary Simulation
• Penetration Testing
• Risk Assessment
• Automation Scripting
• Cloud Security
• Cybersecurity
• AI Models
• Regulatory Frameworks

Soft Skills

• Mentoring
• Communication

Certifications & Qualifications

• ISO27001

Industry Keywords

• Cybersecurity
• Security Operations
• Offensive Security

Tools & Technologies

• Kali Linux
• Burp Suite
• Tenable
• Splunk
• Azure
• GCP