Business Analyst EEASM

Job Summary

We are looking for an entry-level cybersecurity professional with foundational knowledge of Attack Surface Management (ASM), vulnerability management, and security monitoring. The candidate will help identify, assess, and track potential security risks across an organization's IT environment, including internet-facing assets, applications, servers, and cloud infrastructure.

Key Responsibilities

• Identify and maintain an inventory of internet-facing assets, domains, subdomains, IP addresses, and web applications.

• Assist in discovering unknown or unmanaged IT assets that may introduce security risks.

• Monitor external attack surfaces using ASM and security assessment tools.

• Support vulnerability identification, risk assessment, and remediation tracking.

• Perform basic security assessments and review findings from vulnerability scanners.

• Help validate security alerts and prioritize issues based on severity and business impact.

• Collaborate with security, infrastructure, cloud, and application teams to resolve identified risks.

• Maintain documentation, reports, asset inventories, and remediation status.

• Follow established cybersecurity policies, procedures, and industry best practices.

Required Skills

• Basic understanding of cybersecurity concepts and information security principles.

• Foundational knowledge of Attack Surface Management, vulnerability management, and threat exposure.

• Understanding of TCP/IP, DNS, HTTP/HTTPS, ports, domains, and subdomains.

• Familiarity with operating systems, web applications, networks, and cloud environments.

• Basic knowledge of vulnerability scanning and security assessment tools.

• Ability to analyze security findings, document risks, and track remediation activities.

• Good communication, analytical, and problem-solving skills.

Preferred Skills

• Exposure to tools such as Qualys, Tenable, Rapid7, Microsoft Defender, or similar security platforms.

• Familiarity with ASM or External Attack Surface Management (EASM) tools such as Microsoft Defender EASM, Cortex Xpanse, or Censys.

• Basic knowledge of OWASP Top 10, CVEs, and CVSS severity ratings.

• Awareness of cloud security concepts across AWS, Azure, or Google Cloud Platform.

• Familiarity with SIEM tools, ticketing systems, or vulnerability management dashboards.

Experience and Education

• 0–2 years of experience in cybersecurity, vulnerability management, IT security, or a related field.

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or equivalent practical experience.

• Relevant certifications such as Security+, ISC2 Certified in Cybersecurity (CC), or equivalent are preferred.

Ideal Candidate

A motivated cybersecurity professional with foundational knowledge of external attack surfaces, asset discovery, vulnerability assessment, and risk remediation who is eager to develop hands-on experience in enterprise security operations.