Cyber SDC - Attack Surface Monitoring Analyst - Senior - Consulting - Location OPEN

EY; Louisville (KY); On-site; USD 80,000 - 110,000; Full time

Job summary

An established industry player is seeking a skilled Attack Surface Monitoring Analyst to enhance their cybersecurity efforts. This role focuses on identifying and managing the organization's attack surface through comprehensive monitoring and analysis. You will leverage OSINT techniques and collaborate with internal teams to ensure asset security while performing vulnerability assessments. This position offers a unique opportunity to work in a dynamic environment that fosters continuous learning and professional growth. If you're passionate about cybersecurity and want to make a significant impact, this role is perfect for you.

Benefits

Competitive Salary

Comprehensive Benefits

Flexible Work Arrangements

Diverse and Inclusive Culture

Continuous Learning Opportunities

Leadership Development Programs

Qualifications

• 4+ years of experience in cybersecurity and attack surface monitoring.
• Hands-on experience with OSINT and vulnerability management.

Responsibilities

• Conduct OSINT and reconnaissance to discover accessible resources.
• Perform vulnerability scans and analyze results for accuracy.

Skills

Cybersecurity

Attack Surface Monitoring

Penetration Testing

Vulnerability Management

OSINT Techniques

Network Scanning Tools

Analytical Skills

Problem-Solving

Documentation Skills

Education

Bachelor’s Degree

Graduate Degree

Tools

OSINT Tools

Vulnerability Scanners

Network Scanning Tools

Scripting (Python, Bash)

Job description

Join to apply for the Cyber SDC - Attack Surface Monitoring Analyst - Senior - Consulting - Location OPEN role at EY.

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. Join us to create an exceptional experience for yourself and a better working world for all.

The opportunity

We are seeking an experienced Attack Surface Monitoring professional to join our cybersecurity team as a Lead Engineer. The role involves identifying and managing the attack surface of our organization through comprehensive monitoring and analysis, with a focus on OSINT and reconnaissance techniques.

Your Key Responsibilities

• Conduct OSINT and reconnaissance activities to discover externally accessible resources.
• Review assets manually to confirm their validity.
• Collaborate with internal teams for asset identification and classification.
• Perform port scans, service discovery, and vulnerability scans.
• Analyze results to identify vulnerabilities.
• Verify vulnerabilities manually for accuracy.
• Compile technical reports of findings.

Skills And Attributes For Success

• Proven experience in cybersecurity, attack surface monitoring, penetration testing, and vulnerability management.
• Strong knowledge of OSINT techniques and reconnaissance methodologies.
• Proficiency with network scanning tools and frameworks.
• Excellent analytical, problem-solving, and documentation skills.

Minimum Qualifications

• Bachelor’s degree with approximately 4 years of related experience, or a graduate degree with about 3 years of experience.
• Experience in attack surface monitoring, penetration testing, or vulnerability management projects.
• Updated knowledge of exploits and security trends.
• Hands-on experience with OSINT and vulnerability scanners.
• Valid US driver’s license and/or passport; willingness to travel.

Preferred Qualifications

• Knowledge of Windows, Linux, Unix, and other OS.
• Certifications such as OSCP, OSWP, GPEN, GWAPT, OSCE, OSEE, GXPN, CISSP, CISM, PMP, CREST.
• Scripting skills (Python, Bash).
• Familiarity with latest exploits, TTP, vulnerability remediation, and security trends.
• Understanding of network security, web vulnerabilities (OWASP Top 10), and attack vectors.
• Strong communication and teamwork skills.

What We Offer

Competitive salary range, comprehensive benefits, flexible work arrangements, and a diverse, inclusive culture focused on continuous learning and leadership development.

We encourage qualified candidates to apply promptly. EY is committed to equal employment opportunity and providing accommodations for applicants with disabilities.