IT Security Analyst

The role focuses on designing and governing enterprise Vulnerability Exposure Management and external attack surface security capabilities, strengthening visibility into internet-facing assets, identifying emerging threats, and driving security risk reduction across complex enterprise environments.

Responsibilities

• Design and oversee enterprise Vulnerability Exposure Management and external attack surface security programs.
• Assess security risks across internet-facing infrastructure, cloud services, DNS, SMTP, TLS certificates, and SaaS environments.
• Evaluate threat intelligence, dark web monitoring, and external vulnerability scanning capabilities to identify emerging exposures.
• Drive security architecture decisions, risk prioritization, and cross-functional initiatives across enterprise teams.
• Establish security standards, communicate risks to executive stakeholders, and leverage enterprise-approved AI tools to improve security operations and decision-making.

Mandatory Skills:

• Security Architecture
• Vulnerability Exposure Management
• External Attack Surface Management
• Enterprise Security
• Cloud Security
• DNS / SMTP / TLS
• SaaS Security
• Threat Intelligence
• Dark Web Monitoring
• Vulnerability Scanning
• Email Security
• Proofpoint
• Security Risk Management
• Stakeholder Management

Mandatory Skills Description

• 8+ years of experience in security architecture, enterprise security, or platform security roles. Proven experience designing or overseeing Vulnerability Exposure Management and external exposure programs.
• Strong understanding of internet-facing infrastructure, cloud services, DNS, SMTP, TLS certificates, SaaS exposure, threat actor reconnaissance, exploitation techniques, dark web monitoring, threat intelligence, and external vulnerability scanning.
• Knowledge of email security platforms, including Proofpoint, is required.
• Demonstrated ability to operate in ambiguous environments, influence cross-functional teams, and communicate complex security concepts to technical and executive audiences.
• Associate's degree in Computer Science, Information Security, Engineering, or equivalent practical experience required.
• Experience within healthcare or other highly regulated industries.
• Hands-on or architectural expertise with Proofpoint, Bright, Xpanse, Tenable, and Splunk or similar SIEM platforms.
• Familiarity with HIPAA, NIST, ISO, and SOC compliance frameworks. Experience influencing enterprise security platforms, advising executive stakeholders on risk visibility and prioritization, and mentoring security engineering or architecture teams.
• Experience with enterprise-approved AI tools, including GitHub Copilot, Microsoft 365 Copilot, and other GenAI platforms, is expected, with a minimum of 90% weekly usage to support productivity, documentation, analysis, and continuous improvement.