External Attack Surface Management Analyst
$92,820–$109,200 year
On-siteCharlotte, North Carolina, United States or Cincinnati, Ohio, United States
Job Summary
Conduct continuous discovery and monitoring of internet-facing assets, including domains, cloud resources, and web applications, while validating findings from security platforms. Perform manual verification of exposed services and misconfigurations using OSINT and adversary-inspired reconnaissance techniques to identify unknown or shadow IT assets. Develop Python scripts to automate asset enrichment and reporting processes, maintaining accurate documentation of investigations and remediation activities. Support incident response and threat hunting when external exposures are identified and assist with reporting metrics on asset coverage and exposure reduction.
Required Qualifications
- Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field; or equivalent work experience
- 1+ years of experience in cybersecurity or related information technology disciplines
- This role requires working from a U.S. Bank location three (3) or more days per week
- Applicants must be able to comply with U.S. Bank policies and procedures including the Code of Ethics and Business Conduct and related workplace conduct and safety policies
Desired Qualifications
- Understanding external attack surface management concepts and methodologies
- Familiarity with common attacker reconnaissance techniques and publicly available intelligence gathering
- Knowledge of web application security concepts, OWASP Top 10 risks, and internet-facing infrastructure
- Understanding of vulnerability management processes and remediation workflows
- Experience scripting with Python, PowerShell, JavaScript, or other object-oriented programming languages
- Basic knowledge of networking, web technologies, cloud platforms, and cybersecurity principles
- Familiarity with APIs, automation frameworks, and data analysis techniques
- Understanding of DNS, SSL/TLS certificates, HTTP/S, IP networking, and cloud services
- Experience with Git, GitLab, or other source control platforms
- Effective verbal and written communication skills
- Ability to work collaboratively with technical and non-technical stakeholders
- Ability to manage multiple priorities in a fast-paced environment
- Demonstrated curiosity, initiative, and commitment to continuous learning
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.