Senior Attack Surface Analyst - Lead Security & Cloud

Aristocrat Leisure; Kraków; On-site; PLN 180,000 - 240,000; Full time

Job summary

Aristocrat Leisure is seeking a Sr. Analyst - Attack Surface Management in Kraków to lead attack surface reconnaissance and asset identification. You will manage parts of the vulnerability program, conduct in-depth analysis, and apply testing techniques to validate gaps.

Mentoring and automation efforts will be key to improving processes for global security. The role requires advanced OSINT, vulnerability management expertise, and cloud security experience with Azure/GCP.

Qualifications

• Advanced knowledge of vulnerability management, OSINT, and adversary simulation.
• Experience with cloud security assessment and enterprise risk.
• Familiarity with penetration testing techniques and security controls.

Responsibilities

• Lead attack surface reconnaissance and asset identification efforts.
• Manage a portion of the vulnerability management program and onboarding.
• Analyze vulnerabilities and provide risk assessments to leadership.
• Apply penetration testing techniques to validate gaps and exploit scenarios.
• Mentor junior analysts and drive process improvements.
• Automate attack surface monitoring with scripting and cloud solutions.
• Research threats and implement countermeasures accordingly.
• Communicate risks and mitigation plans to executive leadership.

Skills

Vulnerability management

OSINT

Adversary simulation

Cloud security

Penetration testing

Tools

Kali Linux

Burp Suite

Tenable

Splunk

Azure

GCP

Job description

Aristocrat Leisure is seeking a Sr. Analyst - Attack Surface Management in Kraków to lead attack surface reconnaissance and asset identification. You will manage parts of the vulnerability program, conduct in-depth analysis, and apply testing techniques to validate gaps.

Mentoring and automation efforts will be key to improving processes for global security. The role requires advanced OSINT, vulnerability management expertise, and cloud security experience with Azure/GCP.