Senior InfoSec Analyst - Attack Surface Lead (Hybrid)

Mass General Brigham (Enterprise Services); Somerville (MA); Hybrid; USD 94,000 - 137,000; Full time

Job summary

Mass General Brigham Incorporated is seeking a Senior Information Security Analyst to lead the Attack Surface Management function. This role advances vulnerability discovery, exposure analysis, and attack simulation to prioritize remediation based on exploitability and business impact.

The ideal candidate is a deeply technical security professional with experience in vulnerability management, penetration testing, and adversary emulation.

Qualifications

• Associate's degree in a related field required, or bachelor's degree.
• Experience may be accepted in lieu of a degree.
• Relevant professional certifications preferred or required, such as GCIH, GPEN, CISSP, OSCP, or similar credentials.
• 5-7 years of relevant experience required.
• Strong leadership, communication, and project management skills.
• Authority in cybersecurity concepts within the role's domain.

Responsibilities

• Vulnerability Discovery: Identify vulnerabilities across infrastructure, applications, cloud environments, endpoints, and externally exposed assets.
• Attack Surface Analysis: Analyze exposed assets, services, technologies, identities, ownership gaps, and environmental risk.
• Penetration Testing Coordination: Support penetration testing activities, including scoping, methodology, technical validation, reporting, and remediation follow-up.
• Attack Simulation: Coordinate and support attack simulation and adversary emulation activities to validate security controls, response processes, and detection coverage.
• Remediation Prioritization: Prioritize remediation activity based on exploitability, asset criticality, business context, exposure, and threat relevance.
• Detection and Threat Hunting Handoffs: Partner with Security Detections, Threat Intelligence, and Threat Hunting teams to inform detection engineering and threat priorities.
• Program Maturity: Develop repeatable processes, SOPs, playbooks, and reporting standards for ASM workflows.
• Incident Response Support: Provide insight into potential attack paths and exploited vulnerabilities during cyber incidents.
• Written Documentation: Create and update ASM-related reports, findings, and playbooks.

Skills

Cybersecurity concepts

Leadership

Communication

Project management

Decision making

Threat intelligence

Education

Associate's degree in related field

Bachelor's degree in related field

Job description

Mass General Brigham Incorporated is seeking a Senior Information Security Analyst to lead the Attack Surface Management function. This role advances vulnerability discovery, exposure analysis, and attack simulation to prioritize remediation based on exploitability and business impact.

The ideal candidate is a deeply technical security professional with experience in vulnerability management, penetration testing, and adversary emulation.