Attack Surface & Security Configuration Analyst

United Technology; Charlotte (NC); On-site; USD 90,000 - 130,000; Full time

Job summary

First Roles is seeking an experienced Security Analyst focused on Security Configuration and Attack Surface Management. You will develop and enforce configuration compliance policies, validate baselines, and drive remediation with cross-functional teams.

Responsibilities include planning and testing controls, performing scanning, and supporting risk and regulatory requirements across Unix and Windows environments using Python or PowerShell for automation.

Qualifications

• Experience with ASM and security configuration compliance.
• Ability to develop and enforce configuration policies.
• Experience validating security baselines and remediation.
• Familiarity with multiple security tooling and scanning platforms.

Responsibilities

• Serve as SME for ASM and security configuration compliance.
• Plan, develop, test, and implement configuration policies and controls.
• Support Secure Configuration Program initiatives.
• Define and validate security baseline policies and configuration controls.
• Remediate configuration non-compliance with technology teams.
• Analyze scan findings and assist remediation activities.

Skills

Attack Surface Management

Security Configuration / Configuration

Vulnerability & Configuration Scanning

Baseline Policies & Controls

Information Security / Technology Risk

Risk Mitigation

Unix / Windows Administration

Python / Bash / PowerShell

Regex

Security Scripting / Automation

Enterprise Security Controls

Tools

Qualys

Tanium

Tenable

Symantec

Job description

First Roles is seeking an experienced Security Analyst focused on Security Configuration and Attack Surface Management. You will develop and enforce configuration compliance policies, validate baselines, and drive remediation with cross-functional teams.

Responsibilities include planning and testing controls, performing scanning, and supporting risk and regulatory requirements across Unix and Windows environments using Python or PowerShell for automation.