EASM Analyst: Attack Surface & Risk Insights

Relha LLC; Hopkins, Northern (MN, KY); Hybrid; USD 93,000 - 109,000; Full time

Job summary

U.S. Bank is seeking an External Attack Surface Management Analyst to help identify and reduce internet-facing cybersecurity exposures. The role emphasizes continuous discovery of assets, validation of findings, remediation coordination, and automation of security processes.

A successful candidate will leverage OSINT, scripting, and attacker-informed techniques to assess risks, automate tasks, and improve visibility across domains, IPs, cloud resources, APIs, and digital infrastructure.

Qualifications

• Bachelor's degree or equivalent work experience in cybersecurity or related IT discipline.
• 1+ years of experience in cybersecurity or related information technology disciplines.

Responsibilities

• Identify, validate, monitor, and reduce internet-facing cybersecurity exposures across the Bank.
• Automate asset discovery, validation, enrichment, and reporting processes using Python scripts.
• Validate findings from EASM platforms and other security tools; maintain documentation of investigations.
• Assist with incident response, threat hunting, and cyber investigations for external exposures.
• Stay informed on emerging threats and attacker techniques; support onboarding of assets into enterprise security processes.

Skills

OSINT basics

Python scripting

Security tooling

Vulnerability management

Attack surface concepts

Communication

Education

Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field

Tools

Git / GitLab

Job description

U.S. Bank is seeking an External Attack Surface Management Analyst to help identify and reduce internet-facing cybersecurity exposures. The role emphasizes continuous discovery of assets, validation of findings, remediation coordination, and automation of security processes.

A successful candidate will leverage OSINT, scripting, and attacker-informed techniques to assess risks, automate tasks, and improve visibility across domains, IPs, cloud resources, APIs, and digital infrastructure.