Security Analyst Consultant - Attack Surface Management
$110,000–$140,000 year
Remote · Seattle, Washington, United States
Job Summary
Senior Security Analyst Consultant – Attack Surface Management responsible for leading and maturing the ASM program, identifying and prioritizing vulnerabilities, collaborating with security, engineering, cloud, and DevOps teams, and driving remediation. Applies OSINT and threat intelligence, develops automation to improve visibility and efficiency, supports incident response, and ensures compliance considerations (PCI DSS, SOC 2). Partners across enterprise to strengthen security posture, mentors colleagues, and communicates risk and program effectiveness to technical and non-technical stakeholders.
Required Qualifications
- 6+ years of experience in cybersecurity (security operations, threat hunting, offensive security, red teaming or related)
- Experience building, scaling, or leading Attack Surface Management (ASM) capabilities and programs
- Strong understanding of vulnerability management methodologies and risk prioritization
- Experience working within multi-cloud environments (AWS, Azure, GCP)
- Deep knowledge of attacker tactics, techniques and procedures (TTPs) and MITRE ATT&CK
- Expertise in network security, cloud security, attack path analysis, and external attack surface discovery
- Experience OSINT, reconnaissance, and threat intelligence activities
- Proficiency with scripting and automation (Python, PowerShell)
- Strong understanding of enterprise infrastructure, application architectures and data flows
- Ability to influence architectural decisions to reduce risk
- Experience leading cross-functional security initiatives
- Excellent written and verbal communication skills
- Data-driven approach to risk management
Apply with one swipe on Sorce. We auto-fill applications and apply on your behalf — no cover letters, no 40-minute forms.
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.