Position:
Threat Exposure & Attack Surface Analyst (R-00191)
Company:
True Zero Technologies
Location:
100% Remote
Employment type:
Full-Time
Short Summary:
True Zero Technologies is seeking a Threat Exposure & Attack Surface Analyst to identify, validate, and prioritize cybersecurity risks for the National Institutes of Health (NIH). This role integrates vulnerability management, threat intelligence, and attack surface management to assess enterprise cyber exposure.
Responsibilities:
- Analyze enterprise vulnerability data to identify the highest priority cyber exposures across the NIH environment.
- Maintain awareness of CISA Known Exploited Vulnerabilities (KEVs), emerging threats, and active adversary campaigns.
- Correlate vulnerability findings with threat intelligence and operational risk to improve remediation prioritization.
- Evaluate the enterprise attack surface and assess how changes in infrastructure influence organizational risk.
- Validate penetration testing findings and assess compensating controls.
- Support vulnerability management teams by recommending remediation priorities.
- Collaborate with incident responders and security engineers to refine enterprise risk prioritization.
- Develop technical analyses and operational reporting to communicate cyber exposure.
- Support RMF activities with technical justification for risk management.
- Recommend improvements to attack surface management processes.
Requirement:
- Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or related discipline.
- Three or more years of experience in vulnerability management, cyber threat intelligence, or enterprise risk analysis.
- Experience analyzing vulnerability data and translating findings into operational risk.
- Working knowledge of CVSS, CVEs, CISA KEVs, and MITRE ATT&CK.
- Understanding of attack paths, identity-based attacks, and common adversary tactics.
- Familiarity with NIST RMF and Federal cybersecurity practices.
- Strong analytical and technical writing skills.
Benefits:
- Competitive salary, paid twice per month.
- Best in class medical coverage with 100% of premiums covered.
- Company-wide new business incentive programs.
- 3 weeks of PTO + 11 Paid Holidays Annually.
- 401k Program with 100% company match on the first 4%.
- Monthly reimbursement of Cell Phone and Home Internet costs.
- Paternity/Maternity Leave.
- Investment in training and certifications.