Among computer occupations, all other, AI is already used for a large share of the tasks. Measured exposure for computer occupations, all other: 31% (high).

Share of this job’s tasks that AI is already used for at work, from real usage. It is not a forecast of job loss, and a low number means no use seen yet. Source: Anthropic Economic Index.

Check how this applies to your own job

Skills this job asks for

Say which you have and which you want to build. We use it to match you to jobs like this one.

About the job

a { text-decoration: none; color: #464feb; } tr th, tr td { border: 1px solid #e6e6e6; } tr th { background-color: #f5f5f5; }

Cybersecurity Analyst – Vulnerability & Attack Surface Management Location: Minnesota | Remote Compensation: $60-$80Hr

Position Summary

We are seeking a Cybersecurity Analyst – Vulnerability & Attack Surface Management to help strengthen the organization’s security posture through proactive identification, assessment, and remediation of security risks. This role will focus on discovering and inventorying assets, monitoring internal and external attack surfaces, identifying vulnerabilities, and partnering with technical teams to reduce cyber risk across on-premises and cloud environments.

The ideal candidate will have 2-5 years of cybersecurity experience with a strong understanding of vulnerability management programs, attack surface analysis, asset discovery, and security exposure management.

Key Responsibilities of the Cybersecurity Analyst:

Perform continuous asset discovery and inventory management across enterprise environments.

Identify, track, and assess internal and external attack surfaces to uncover potential security exposure.

Conduct vulnerability assessments using industry-standard scanning tools and technologies.

Analyze vulnerability findings, prioritize remediation efforts based on risk, and work with infrastructure, cloud, and application teams to mitigate issues.

Monitor and maintain Attack Surface Management (ASM) platforms and security exposure management tools.

Evaluate cloud security configurations and posture using Cloud Security Posture Management (CSPM) solutions.

Develop risk-based reporting and dashboards to communicate security findings to leadership and technical stakeholders.

Assist with security audits, compliance initiatives, and cyber risk assessments.

Research emerging threats, vulnerabilities, and attack techniques to proactively identify organizational risks.

Collaborate with Security Operations, Infrastructure, Cloud Engineering, and Application teams to improve overall cyber resilience.

Support remediation validation and continuous improvement of vulnerability management processes.

Required Qualifications of the Cybersecurity Analyst:

2-5 years of experience in cybersecurity, vulnerability management, security operations, or related information security roles.

Experience with vulnerability scanning platforms such as:

Tenable Nessus

Rapid7 InsightVM

Qualys

Microsoft Defender Vulnerability Management

Experience with asset discovery and inventory management tools.

Familiarity with Attack Surface Management (ASM) methodologies and technologies.

Understanding of attack surface modeling and cyber exposure management concepts.

Experience working with cloud environments including AWS, Azure, or Google Cloud Platform.

Familiarity with Cloud Security Posture Management (CSPM) tools.

Understanding of common security frameworks including NIST Cybersecurity Framework, CIS Controls, and MITRE ATT&CK.

Knowledge of vulnerability scoring methodologies including CVSS.

Strong analytical, problem-solving, and communication skills.

Preferred Qualifications of the Cybersecurity Analyst:

Experience with attack surface management platforms such as:

Microsoft Defender EASM

Palo Alto Networks Cortex Xpanse

Tenable Exposure Management

Rapid7 Exposure Command

Experience with security automation and scripting (PowerShell, Python, or Bash).

Relevant cybersecurity certifications including:

Security+

CySA+

GSEC

GIAC certifications

CISSP (preferred but not required)

Experience supporting cloud security initiatives and exposure management programs.

Technical Skills of the Cybersecurity Analyst:

Asset Discovery & Inventory Management

Vulnerability Scanning & Assessment

Attack Surface Management (ASM)

External Attack Surface Monitoring (EASM)

Cloud Security Posture Management (CSPM)

Risk Prioritization & Remediation

Threat Analysis

Security Reporting & Metrics

Security Frameworks & Compliance Standards

#LI-HP1 #INNOV2026

EB-1794855771