Remote Lead Analyst Attack Surface Management

University of Southern California; Glendale (CA); On-site; USD 162,000 - 201,000; Full time

Job summary

University of Southern California seeks a Lead Analyst, Attack Surface Management (ASM) to lead vulnerability lifecycle operations across the university’s systems, networks, and applications. This role reports to the ASM Manager and is fully remote.

You will identify, assess, and mitigate security vulnerabilities, conduct assessments, and integrate threat intelligence into risk management. The role emphasizes collaboration with IT teams and external providers to strengthen defenses and ensure

Qualifications

• 5 years in attack surface and vulnerability management.
• Bachelor’s or equivalent experience/education.
• Knowledge of NIST CSF, ISO 27001, MITRE ATT&CK, OWASP, CIS Controls, COBIT, SANS, PCI DSS, NIST 800-53, ITIL.

Responsibilities

• Oversees the vulnerability lifecycle management process, including detection, monitoring, reporting, and assessment of impact.
• Develops and implements remediation strategies to address vulnerabilities and minimize the attack surface.
• Collaborates with IT teams and stakeholders to validate end-to-end remediation and maintain a consistent user experience.
• Interacts with DSUs and service providers to guide remediation strategies for vulnerabilities.
• Produces detailed reports on vulnerabilities and remediation status for stakeholders.
• Stays informed on threat intelligence feeds and evolving vulnerability trends.

Skills

Attack surface management

Vulnerability management

Security testing practices

Cyber defense concepts

Incident response

Threat intelligence

Education

Bachelor's degree or combined experience/education

Tools

Vulnerability scanning platforms

Job description

University of Southern California seeks a Lead Analyst, Attack Surface Management (ASM) to lead vulnerability lifecycle operations across the university’s systems, networks, and applications. This role reports to the ASM Manager and is fully remote.

You will identify, assess, and mitigate security vulnerabilities, conduct assessments, and integrate threat intelligence into risk management. The role emphasizes collaboration with IT teams and external providers to strengthen defenses and ensure