Cybersecurity Systems Engineer — EASM & Vulnerability Ops

NANOSOFT CONSULTING TALENT PAGE; United States; On-site; USD 80,000 - 110,000; Full time

Job summary

NANOSOFT CONSULTING TALENT PAGE is seeking a contract cybersecurity analyst to support onboarding of a SaaS External Attack Surface Management tool. You will ingest targets, review workloads, administer asset data, and build integrations with related platforms.

You will also communicate findings to stakeholders and coordinate with GIS security teams. Typical duties include reviewing the previous day's discoveries, attributing workloads, determining ownership, and triaging vulnerabilities while

Qualifications

• Experience with vulnerability management tools and workflows.
• Understanding of DNS, ASN, and SSL certificates fundamentals.
• Strong networking knowledge (IP, subnets, ports, TCP/UDP).
• Familiarity with CVE and CVSS terminology and scoring.
• Ability to review discovered workloads and triage findings.

Responsibilities

• Assist onboarding of a new SaaS External Attack Surface Management tool.
• Ingest targets, review discovered workloads, and manage asset data.
• Develop and support integrations with related platforms.
• Communicate important findings to stakeholders and security teams.
• Review previous day discoveries and determine workload ownership.

Skills

Vulnerability management tools

DNS concepts

ASN concepts

SSL Certificates basics

Networking fundamentals

CVE & CVSS basics

Threat discovery reviews

Education

B.S. or B.A. in IT or related field

2-4 years cybersecurity experience

No degree with 4+ years experience

Tools

Qualys

Tenable

ZAP

Rapid7

Job description

NANOSOFT CONSULTING TALENT PAGE is seeking a contract cybersecurity analyst to support onboarding of a SaaS External Attack Surface Management tool. You will ingest targets, review workloads, administer asset data, and build integrations with related platforms.

You will also communicate findings to stakeholders and coordinate with GIS security teams. Typical duties include reviewing the previous day's discoveries, attributing workloads, determining ownership, and triaging vulnerabilities while