Senior Attack Surface Management Lead (Hybrid)

Mass General Brigham Incorporated; Somerville (MA); Hybrid; USD 94,000 - 137,000; Full time

Job summary

Mass General Brigham Incorporated, in Somerville, MA, seeks a Senior Information Security Analyst to lead the Attack Surface Management function. The role advances ASM across vulnerability discovery, exposure analysis, and attack simulation, coordinating with threat intelligence, threat hunting, and detection engineering.

The ideal candidate has 5–7 years of relevant experience, professional certifications such as CISSP/OSCP, and a proven ability to translate technical findings into risk

Qualifications

• 5–7 years of relevant experience required.
• Relevant professional certifications preferred or required, such as GCIH, GPEN, CISSP, OSCP, or similar credentials.
• Education: Associate’s degree or bachelor’s degree in a related field.

Responsibilities

• Vulnerability Discovery: Identify vulnerabilities across infrastructure, apps, cloud, endpoints, and external assets with asset context and business impact.
• Attack Surface Analysis: Analyze exposed assets and ownership gaps to provide risk-reducing recommendations.
• Penetration Testing Coordination: Scope, validate, report, and follow remediation with risk-ranked findings.
• Attack Simulation: Coordinate adversary emulation and map activities to MITRE ATT&CK for improvements.
• Remediation Prioritization: Prioritize by exploitability, asset criticality, and business context.
• Detection Handoffs: Inform detections, hunt development, and threat intelligence.
• Program Maturity: Create SOPs, playbooks, and reporting standards for ASM workflows.
• Incident Response Support: Provide insights into attack paths and exploitable assets.
• Written Documentation: Update playbooks and security control documentation.
• Communication: Translate technical detail for various audiences.

Skills

Cybersecurity concepts

Leadership

Communication

Project management

Decision making

Education

Associate/Bachelor’s degree in related field

Tools

Cybersecurity tools knowledge

Job description

Mass General Brigham Incorporated, in Somerville, MA, seeks a Senior Information Security Analyst to lead the Attack Surface Management function. The role advances ASM across vulnerability discovery, exposure analysis, and attack simulation, coordinating with threat intelligence, threat hunting, and detection engineering.

The ideal candidate has 5–7 years of relevant experience, professional certifications such as CISSP/OSCP, and a proven ability to translate technical findings into risk