Senior Vulnerability & Attack Surface Analyst

Openkrill; United States; Remote; USD 90,000 - 150,000; Full time

Job summary

OpenLoop is seeking a Vulnerability & Attack Surface Management Analyst II to help build and run our security program. You will own the vulnerability lifecycle, drive remediation with engineering teams, and shape a risk-based prioritization model for our cloud, container, and web assets.

You will work with AI tools and security platforms to automate reporting and improve the speed and quality of fixes, while ensuring HIPAA-aligned data handling and patient safety."

Qualifications

• 3–6 years in security with hands-on vulnerability management or ASM.
• Experience running a vulnerability scanning or CNAPP platform.
• Ability to prioritize findings using a risk-based model and explain calls.
• Cloud security fundamentals in AWS or GCP; container/images findings in code repos.
• Experience shipping fixes with engineering teams.
• Scripting to query APIs and automate reporting.
• Strong writing for tickets and executive risk summaries.

Responsibilities

• Run vulnerability lifecycle across cloud workloads, containers, code repos, and endpoints.
• Prioritize by risk using the model; adjust priorities with evidence.
• Build asset inventory with owners and run external discovery for exposures.
• Drive remediation through Engineering, IT, and Platform teams.
• Automate repetitive work; roll out base images and dependency baselines.
• Own web app security; run dynamic scans and coordinate fixes with apps teams.
• Set up checks for the new publishing platform before go-live.
• Manage vulnerability disclosure and bug bounty intake; verify fixes.
• Use AI tools to triage, draft remediation guidance, and produce reports.
• Track MTTR, backlog burn-down, and SLA coverage; support audits.

Skills

Vulnerability management

Attack surface management

Cloud security

Scripting (Python/PowerShell)

AI in security

Security writing & communication

Tools

CNAPP platform

Wiz

Orca

Prisma Cloud

Defender for Cloud

Lacework

CrowdStrike Falcon Exposure Management

Tenable/Qualys/Rapid7

Job description

OpenLoop is seeking a Vulnerability & Attack Surface Management Analyst II to help build and run our security program. You will own the vulnerability lifecycle, drive remediation with engineering teams, and shape a risk-based prioritization model for our cloud, container, and web assets.

You will work with AI tools and security platforms to automate reporting and improve the speed and quality of fixes, while ensuring HIPAA-aligned data handling and patient safety."