- Mid
- 5–8 years
Responsible for prioritizing, quantifying, and managing cyber risk by correlating threat intelligence, vulnerability data, attack paths, and business impact.
Responsibilities
- Analyze and correlate data from vulnerability management platforms, red team and purple team exercises, threat intelligence and exploit trends, attack surface management tools
- Identify and prioritize real-world exploitable risks
- Model attack paths and exposure scenarios across identity, cloud environments, network and endpoint assets
- Partner with Red and Blue teams to assess likelihood and impact of attack techniques
- Align technical findings to enterprise risk tolerance
Requirements
- Nice to have: Attack surface management tools
- Nice to have: Breach and attack simulation tools
- Nice to have: FAIR
- Nice to have: Cloud risk management (AWS, Azure, GCP)
- Nice to have: Purple teaming