Security Analyst - Security Configuration / Attack Surface Management Technical Analyst

JOB TITLE: Security Analyst - Security Configuration / Attack Surface Management Technical Analyst

Job Summary

We are seeking an experienced Security Analyst  - Security Configuration & Attack Surface Management Analyst to support enterprise attack surface management, secure configuration, and configuration compliance initiatives.

The role will focus on developing and implementing configuration compliance policies and technical controls, validating security baselines, identifying non-compliance, and partnering with technology teams to drive remediation.

Key Responsibilities

• Serve as a technical SME for Attack Surface Management (ASM) and security configuration compliance.
• Plan, develop, test, and implement configuration compliance policies and technical controls.
• Support enterprise Secure Configuration Program initiatives.
• Define and validate security baseline policies and configuration controls.
• Work with technology teams to identify and remediate configuration non-compliance.
• Ensure vulnerability and configuration scans generate consistently accurate results and reports.
• Analyze scan findings and assist teams with remediation activities.
• Manage security and compliance activities across multiple technology products simultaneously.
• Configure and manage enterprise-level technical security controls.
• Partner with business and technology teams to implement effective risk-mitigation strategies.
• Support security risk and regulatory compliance requirements.
• Use scripting and automation to assist with security analysis, validation, and remediation activities.
• Work across Unix, Windows, and workstation environments.

Good to Have

• Financial services experience
• CISSP
• CISM
• Similar industry-recognized security certifications
• Experience with financial-industry regulatory requirements
• Strong understanding of enterprise risk-management frameworks

Must-Have Skills

• Attack Surface Management (ASM)
• Security Configuration / Configuration Compliance
• Qualys / Tanium / Tenable / Symantec
• Vulnerability & Configuration Compliance Scanning
• Security Baseline Policies & Controls
• Information Security / Technology Risk
• Risk Mitigation
• Unix / Windows Administration
• Python / Bash / PowerShell
• Regex
• Security Scripting / Automation
• Enterprise Security Controls