Senior Attack Surface Analyst - Remote & Automation Lead

SailPoint Technologies Holdings, Inc.; United States; On-site; USD 92,000 - 155,000; Full time

Job summary

SailPoint Technologies Holdings, Inc. seeks a highly technical Senior Attack Surface Management Analyst to advance our global ASM program.

You will map, analyze, and mitigate external and internal assets across multi-clouds, automate asset discovery, and drive risk-based remediation with engineering and security teams. Reporting to the Head of Vulnerability Management, you will employ an offensive security mindset, leverage BAS and ATT&CK mappings, and mentor junior analysts while delivering

Qualifications

• 5+ years of progressive, hands-on experience in Attack Surface Management, Vulnerability Management, Penetration Testing, Threat Intelligence, or Security Operations—at least 1-2 years in a senior or lead capacity.
• Advanced Cloud Infrastructure Knowledge across AWS, Azure, GCP, with IAM and cloud-native APIs.
• Strong Automation & API Scripting skills (Python, Go, or PowerShell) and REST APIs.

Responsibilities

• Continuous Discovery and Programmatic Asset Attribution to map and maintain a real-time inventory of assets across cloud providers, SaaS apps, and Shadow IT.
• Exposure Analysis, Threat Intelligence, and Prioritization using CVSS, threat intel sources, and business criticality to determine what to fix first.
• Security Validation and Remediation Orchestration with BAS and autonomous pentesting mapped to MITRE ATT&CK to validate controls and drive remediation.

Skills

Attack Surface Management

Vulnerability Management

Penetration Testing

Threat Intelligence

Automation & API Scripting

MITRE ATT&CK

Cloud Security

Scripting Python/Go/PowerShell

Communication

Education

CISSP

OSCP

GPEN

GCIH

CCSK

Tools

Qualys

CrowdStrike Falcon Spotlight

Job description

SailPoint Technologies Holdings, Inc. seeks a highly technical Senior Attack Surface Management Analyst to advance our global ASM program.

You will map, analyze, and mitigate external and internal assets across multi-clouds, automate asset discovery, and drive risk-based remediation with engineering and security teams. Reporting to the Head of Vulnerability Management, you will employ an offensive security mindset, leverage BAS and ATT&CK mappings, and mentor junior analysts while delivering