Note: The job is a remote job and is open to candidates in USA. EY is a global leader in assurance, tax, transaction, and advisory services, and they are seeking a Cyber Defense Analyst to enhance their vulnerability management and exposure assessment capabilities. The role focuses on attack path discovery, scalable vulnerability detection, and developing solutions to manage vulnerabilities effectively in a rapidly evolving threat landscape.
Responsibilities
- Design and engineer automated attack‑path discovery and validation capabilities
- Build scalable vulnerability detection and verification pipelines that combine enterprise scanning sources with custom validation logic
- Develop controlled exploitation and exploit‑chaining workflows to safely demonstrate real attacker outcomes
- Operationalize continuous offensive validation by engineering testing routines that can run with minimal human prompting
- Fuse Vulnerability Intelligence and Cyber Threat Intelligence into detection and prioritization—tracking exploit maturity/availability, active exploitation signals, and technique trends, etc
- Produce high‑fidelity deliverables that enable remediation and decisioning: reproducible evidence, attack‑path narratives, severity/exploitability rationale, compensating control notes, and clear remediation/mitigation recommendations
- Partner across Red Team, Exposure Assessment, Threat Detection, and VM stakeholders
Skills
- Minimum combined 8 years of experience in vulnerability management, exposure management, offensive security, and security engineering
- Demonstrated experience analyzing vulnerability and security posture data
- Deep understanding of attack paths, misconfigurations, and control failures that lead to material risk
- Proven ability to build scalable solutions to vulnerability and exposure challenges
- Experience operating at a strategic level, balancing technical depth with organizational risk context
- Strong analytical skills with the ability to evaluate large volumes of data to influence solution development
- Excellent communication skills, with comfort engaging senior stakeholders and security leadership
- Ability to manage competing priorities and operate independently in a complex, global environment
- Experience leveraging AI to conduct exposure assessments
Company Overview
Company H1B Sponsorship