Cyber SDC - Attack Surface Monitoring Analyst - Senior - Consulting - Location OPEN

EY; Birmingham (AL); On-site; USD 80,000 - 120,000; Full time

Job summary

An established industry player is seeking a skilled Attack Surface Monitoring Analyst to enhance its cybersecurity team. This role focuses on identifying and managing the attack surface through advanced monitoring and analysis techniques. The ideal candidate will leverage their expertise in OSINT and reconnaissance to uncover vulnerabilities while collaborating with internal teams to ensure accurate asset classification. With a commitment to continuous learning and professional development, this position offers competitive compensation and flexible work arrangements, making it an exciting opportunity for those passionate about cybersecurity.

Benefits

Comprehensive Benefits

Flexible Work Arrangements

Opportunities for Continuous Learning

Leadership Development Programs

Qualifications

• 4+ years of experience in attack surface monitoring, penetration testing, or vulnerability management.
• Hands-on experience with OSINT techniques and vulnerability scanners.

Responsibilities

• Conduct OSINT and reconnaissance activities to discover external resources.
• Perform port scans and vulnerability scans against identified resources.

Skills

Attack Surface Monitoring

Penetration Testing

Vulnerability Management

OSINT Techniques

Analytical Skills

Problem-Solving Skills

Documentation Skills

Education

Bachelor's Degree in a Related Field

Graduate Degree

Tools

Network Scanning Tools

Vulnerability Scanners

Scripting Languages (Python, Bash)

Job description

Join to apply for the Cyber SDC - Attack Surface Monitoring Analyst - Senior - Consulting - Location OPEN role at EY

We are seeking an experienced Attack Surface Monitoring professional to join our cybersecurity team as a Lead Engineer. The role involves identifying and managing the attack surface through monitoring and analysis, with a focus on OSINT and reconnaissance techniques.

Your Key Responsibilities

1. Conduct OSINT and reconnaissance activities to discover external resources related to the organization.
2. Review discovered assets to confirm their validity as company-owned resources.
3. Collaborate with internal teams for accurate asset identification and classification.
4. Perform port scans, service discovery, and vulnerability scans against identified resources.
5. Analyze scan results to identify vulnerabilities and security weaknesses.
6. Verify discovered vulnerabilities manually to ensure relevance and accuracy.
7. Compile technical reports of verified vulnerabilities.

Skills and Attributes for Success

• Proven experience in attack surface monitoring, penetration testing, and vulnerability management.
• Strong knowledge of OSINT techniques and reconnaissance methodologies.
• Proficiency with network scanning tools and vulnerability frameworks.
• Excellent analytical, problem-solving, and documentation skills.

Minimum Qualifications

• Bachelor's degree in a related field with approximately 4 years of experience, or a graduate degree with about 3 years of experience.
• Experience in attack surface monitoring, penetration testing, or vulnerability management projects.
• Updated knowledge of exploits and security trends.
• Hands-on experience with OSINT techniques and vulnerability scanners.
• Valid driver’s license and willingness to travel.

Preferred Qualifications

• Knowledge of Windows, Linux, Unix, and other OS.
• Certifications such as OSCP, OSWP, GPEN, CISSP, etc.
• Experience with scripting languages like Python or Bash.
• Understanding of web vulnerabilities (OWASP Top 10) and network security.
• Strong communication skills and ability to work collaboratively.

What We Offer

Competitive salary range, comprehensive benefits, flexible work arrangements, and opportunities for continuous learning and leadership development.