Note: The job is a remote job and is open to candidates in USA. Saisystems Technology is hiring a Cybersecurity Analyst focused on external attack surface management. The role involves investigating and validating security findings, translating them into remediation guidance, and working with engineering teams to drive remediation.
Skills
- Bachelor's degree in Computer Science, Cybersecurity, or a related field, or equivalent hands-on cybersecurity experience
- 2 to 4 years of experience in vulnerability management, attack surface management, security operations, or a comparable technical security analyst role
- Working knowledge of internet-facing asset types (DNS, certificates, cloud-hosted services, SaaS) and the specific ways they become exposed or misconfigured
- Demonstrated ability to independently investigate and validate a security finding to technical conclusion without close supervision
- Experience with vulnerability or ticketing systems (ServiceNow or equivalent) for issue tracking and SLA management
- Strong written communication skills, specifically the ability to translate a technical finding into remediation guidance that a non-specialist asset owner can act on
- Comfort working directly with asset-owning engineering teams to drive remediation, including following up on stalled or disputed tickets
- Ability to ramp quickly within an established enterprise process rather than requiring a greenfield program to be built
- Prior hands-on experience with an EASM or attack surface management platform (Ionix, Censys, Microsoft Defender External Attack Surface Management, or similar)
- Familiarity with IT asset inventory and cloud tagging practices (AWS, Azure, GCP) in support of ownership attribution
- Experience in a large, multi-subsidiary or acquisition-driven enterprise environment where asset ownership is frequently unclear or contested
- Working knowledge of MITRE ATT&CK and common web and network exploitation techniques
- Experience integrating security tooling output into enterprise systems via API, including ServiceNow or a SIEM platform
- Relevant certifications such as Security+, GWAPT, GCIH, OSCP, or equivalent demonstrated practical skill
Company Overview