Security Analyst - Security Configuration / Attack Surface Management Technical Analyst

United Technology; Charlotte (NC); On-site; USD 90,000 - 130,000; Full time

Job summary

First Roles is seeking an experienced Security Analyst focused on Security Configuration and Attack Surface Management. You will develop and enforce configuration compliance policies, validate baselines, and drive remediation with cross-functional teams.

Responsibilities include planning and testing controls, performing scanning, and supporting risk and regulatory requirements across Unix and Windows environments using Python or PowerShell for automation.

Qualifications

• Experience with ASM and security configuration compliance.
• Ability to develop and enforce configuration policies.
• Experience validating security baselines and remediation.
• Familiarity with multiple security tooling and scanning platforms.

Responsibilities

• Serve as SME for ASM and security configuration compliance.
• Plan, develop, test, and implement configuration policies and controls.
• Support Secure Configuration Program initiatives.
• Define and validate security baseline policies and configuration controls.
• Remediate configuration non-compliance with technology teams.
• Analyze scan findings and assist remediation activities.

Skills

Attack Surface Management

Security Configuration / Configuration

Vulnerability & Configuration Scanning

Baseline Policies & Controls

Information Security / Technology Risk

Risk Mitigation

Unix / Windows Administration

Python / Bash / PowerShell

Regex

Security Scripting / Automation

Enterprise Security Controls

Tools

Qualys

Tanium

Tenable

Symantec

Job description

JOB TITLE: Security Analyst - Security Configuration / Attack Surface Management Technical Analyst

We are seeking an experienced Security Analyst - Security Configuration & Attack Surface Management Analyst to support enterprise attack surface management, secure configuration, and configuration compliance initiatives. The role will focus on developing and implementing configuration compliance policies and technical controls, validating security baselines, identifying non-compliance, and partnering with technology teams to drive remediation.

Key Responsibilities

• Serve as a technical SME for Attack Surface Management (ASM) and security configuration compliance.
• Plan, develop, test, and implement configuration compliance policies and technical controls.
• Support enterprise Secure Configuration Program initiatives.
• Define and validate security baseline policies and configuration controls.
• Work with technology teams to identify and remediate configuration non-compliance.
• Ensure vulnerability and configuration scans generate consistently accurate results and reports.
• Analyze scan findings and assist teams with remediation activities.
• Manage security and compliance activities across multiple technology products simultaneously.
• Configure and manage enterprise-level technical security controls.
• Partner with business and technology teams to implement effective risk-mitigation strategies.
• Support security risk and regulatory compliance requirements.
• Use scripting and automation to assist with security analysis, validation, and remediation activities.
• Work across Unix, Windows, and workstation environments.

Good to Have

• Financial services experience
• CISSP
• CISM
• Similar industry-recognized security certifications
• Experience with financial-industry regulatory requirements
• Strong understanding of enterprise risk-management frameworks

Must-Have Skills

• Attack Surface Management (ASM)
• Security Configuration / Configuration Compliance
• Qualys / Tanium / Tenable / Symantec
• Vulnerability & Configuration Compliance Scanning
• Security Baseline Policies & Controls
• Information Security / Technology Risk
• Risk Mitigation
• Unix / Windows Administration
• Python / Bash / PowerShell
• Regex
• Security Scripting / Automation
• Enterprise Security Controls