Attack Surface Lead - Senior InfoSec Strategist

0100 Mass General Brigham Incorporated; Somerville (MA); Hybrid; USD 94,000 - 137,000; Full time

Job summary

Mass General Brigham Incorporated in Massachusetts is seeking a Senior Information Security Analyst to lead the Attack Surface Management function. You will advance vulnerability discovery, attack surface analysis, and adversary simulation, translating findings into risk narratives and guiding remediation with cross‑team collaboration.

The role requires 5–7 years of relevant experience and certifications such as GCIH, GPEN, CISSP, or OSCP.

Qualifications

• Associate’s or Bachelor's degree required; experience may substitute.
• Certifications such as GCIH, GPEN, CISSP, OSCP preferred or required.
• 5–7 years of relevant information security experience.

Responsibilities

• Lead vulnerability discovery and management across assets.
• Coordinate attack surface analysis and exposure management.
• Support penetration testing and validation activities.
• Coordinate adversary simulation and breach exercises.
• Prioritize remediation based on risk and business impact.
• Collaborate with threat intel, detections, and engineering teams.
• Develop repeatable ASM processes, SOPs, and reporting.

Skills

Vulnerability management

Attack surface analysis

Penetration testing

Adversary simulation

Leadership

Communication

Project management

Education

Associate’s degree or Bachelor's degree in related field

Experience may be accepted in lieu of a degree

GCIH

GPEN

CISSP

OSCP

Job description

Mass General Brigham Incorporated in Massachusetts is seeking a Senior Information Security Analyst to lead the Attack Surface Management function. You will advance vulnerability discovery, attack surface analysis, and adversary simulation, translating findings into risk narratives and guiding remediation with cross‑team collaboration.

The role requires 5–7 years of relevant experience and certifications such as GCIH, GPEN, CISSP, or OSCP.