Tower Lead - Security Investigations, SIEM

Sapsf; United States; Remote; USD 110,000 - 170,000; Full time

Job summary

Sapsf is hiring a Senior Cyber Security Analyst to lead Security Investigations in a remote-capable role for the 2026 Surge project. The candidate will oversee an ASM-focused team of analysts, perform vulnerability discovery validation, and drive risk-based remediation prioritization across the attack surface.

Strong incident response and threat intelligence background required. Key responsibilities include expanding asset coverage, validating ASM visibility, and monitoring exposures with

Qualifications

• Experience in vulnerability identification, classification and reporting across ASM
• Strong background in incident response and threat intelligence
• Proven ability to work across multiple ASM, scanning and patching platforms

Responsibilities

• Identify ASM risks requiring remediation and document them
• Provide continuous validation of attack surface discovery
• Triage and classify findings into P0/P1 and secondary tiers
• Increase throughput of vulnerability remediation per wave
• Monitor active exposures and escalate high-risk vulnerabilities

Skills

Vulnerability identification

Classification

Reporting

Incident Response

Threat Hunting

Threat Intelligence

ASM platforms

Scanning platforms

Patching platforms

Attack Surface Reduction

Tools

ASM tools

Job description

Career Opportunities: Tower Lead - Security Investigations, SIEM (176587)

Requisition ID176587-Posted10/05/2026

Senior Cyber Security Analyst. Remote. 9am-5pm day hors. To support 2026 Surge project (AS cyber alignment), these positions will be responsible for ASMR initiative(s). This initiative will be supporting EVM-TEM-ASM, a team of 7 analysts (from junior international support to principle analyst). Currently, the team has 2 principle analysts, no senior analysts (1 backfill pending), 3 standard analysts and 2 junior analysts.

• Asset Coverage: Expand and validate external asset inventory across designated scope
• Ensure completeness and accuracy of ASM visibility

• Seeding & Validation: Execute continuous validation of attack surface discovery
• Identify gaps in existing tooling and coverage

• Vulnerability Classification & Prioritization: Triage and classify findings into P0 / P1 (primary) and secondary tiers
• Apply risk-based context to improve remediation prioritization

• Execution Throughput: Increase population completed per month
• Drive full vulnerability burndown per entity within each wave

• Monitoring & Escalation: Continuous monitoring of active exposures
• Proactive escalation of high-risk vulnerabilities

The top responsibilities for this position is ID of ASM risks that require remediation, background should include cyber security analysis and incident response. Background should include extensive (5 or more years) in cyber incidents, collaboration and cross function support. The hiring process will be at least 2 video interviews, including 1:1 or panel with a technical assessment and Behavioral style

Key Responsibilities

NA

Skill Requirements

Skill Profile: We require experienced ASM practitioners with proven capability in: Vulnerability identification, classification, rating, and reporting. Working across multiple ASM, scanning, and patching platforms. Strong technical background in: Incident Response, Threat Hunting, Threat Intelligence with deeper understanding of exploitability and real-world risks.

Other Requirements

The groups are all multifunction support from light pen testing, some custom develpement and steeps in standard cyber/ ASM analysis for escalation with some incident management is skills. The candidate should: Demonstrated Attack Surface Reduction skills including vulnerability identification, classification, rating, and reporting. Knowledged and usage of multiple scanning and patching platforms required. Strong documentation skills are needed.