Senior Attack Surface Management Analyst
$92.2k - $155.41kSailPoint Technologies Holdings, Inc.
- # Senior Attack Surface Management AnalystApply: United States: Full time: Posted Yesterday: R012834**Job Description**SailPoint is seeking a highly technical and forward-thinking Senior Attack Surface Management (ASM) Analyst to be a key pillar in our global ASM program. Our program is a centralized function designed to continuously discover, analyze, and mitigate potential cyber threats before they can be exploited.As a Senior ASM Analyst, you will be a critical technical partner to our ASM Team Lead and broader security and engineering teams. You will navigate complex technical challenges, ensuring our risk recommendations are concise, data-driven, and focused on automation. The ideal candidate has a deep offensive security mindset, excels at dissecting complex cloud infrastructures, and is passionate about automating asset discovery. This role is fully remote and reports to the Head of Vulnerability Management.**Key Responsibilities:****Continuous Discovery and Programmatic Asset Attribution*** Execute and scale continuous discovery processes to map and maintain a real-time, comprehensive inventory of all external-facing and internal digital assets, including domains, IPs, APIs, complex cloud resources (AWS, Azure, GCP), SaaS applications, and Shadow IT.* Develop and implement robust asset attribution models, writing scripts to query asset databases and integrate disparate inventories (CMDB, cloud accounts) into a unified, reliable \"single source of truth\".**Exposure Analysis, Threat Intelligence, and Prioritization:*** Proactively identify security exposures like misconfigured cloud storage, exposed administrative portals, outdated systems, and vulnerabilities (including emerging zero-days) across our entire attack surface.* Contribute to intelligence-led prioritization efforts by combining vulnerability severity (beyond CVSS), real-world exploit availability (drawing from CISA KEV and other threat intel sources), business criticality, data sensitivity, mapped attack paths, and active threat intelligence to determine \"what matters most\" and \"what to fix first\" while uncovering root causes.**Security Validation and Remediation Orchestration:*** Orchestrate Breach and Attack Simulation (BAS) and Autonomous Pentesting exercises, safely simulating real-world attacks (mapped to MITRE ATT&CK) to validate the efficacy of existing security controls (SIEM, EDR, Firewalls) and prove vulnerability exploitability.* Collaborate with Engineering, DevOps, and IT teams to define remediation SLAs, build automated ticketing workflows, and verify fixes through continuous monitoring and programmatic re-scanning.* Support continuous Purple Teaming initiatives, partnering closely with offensive (Red Team) and defensive (SOC/Blue Team) functions to translate attack surface findings into resilient detection rules.**Automation, Tooling, and Mentorship:*** Build and maintain automation scripts and API integrations to streamline asset enrichment, automated scanning, threat intelligence correlation, and ticketing system updates.* Evaluate, recommend, and implement cutting-edge ASM and Attack Path mapping platforms to continuously optimize our technical capability stack.* Provide technical leadership and mentorship to junior analysts, fostering deep technical skill development and elevating the team’s overall capabilities.**Core Qualifications:*** 5+ years of progressive, hands-on experience in Attack Surface Management, Vulnerability Management, Penetration Testing, Threat Intelligence, or Security Operations—with at least 1-2 years in a senior or lead capacity.* Advanced Cloud Infrastructure Knowledge: Deep, practical experience securing and querying complex multi-cloud environments (AWS, Azure, or GCP), with a strong grasp of cloud security postures, IAM policies, and cloud-native APIs.* Strong Automation & API Scripting Skills: Proven capability to write clean, maintainable scripts (Python, Go, or PowerShell) and utilize REST APIs to automate workflows, parse large JSON datasets, and stitch security tools together.* Familiarity with Modern Enterprise Tech Stacks: Microservices, Kubernetes/containers, APIs, and modern CI/CD deployment pipelines.* Direct Experience with ASM & Discovery Tooling: Solid proficiency with leading external attack surface management (EASM) and discovery platforms.* Vulnerability & Workflow Tooling: Expertise using vulnerability management suites (e.g., Qualys, CrowdStrike Falcon Spotlight) and translating their outputs into automated remediation workflows.* Attacker Mindset & Frameworks: Deep familiarity with the MITRE ATT&CK framework, active threat intelligence (e.g., Recorded Future), and attack path analysis tools.* Outstanding Technical Communication: Track record of distilling highly complex technical exploits, cloud misconfigurations, and systemic risks into clear, actionable executive summaries and stakeholder remediation guides.**Additional Experience:*** Breach & Attack Simulation (BAS): Hands-on experience operating BAS or autonomous pentesting platforms.* Cybersecurity AI Application: Familiarity with leveraging AI/ML technologies to enhance asset discovery, automate risk categorization, or defend against AI-driven adversarial attacks.* Industry Certifications: Advanced certs such as CISSP, OSCP, GPEN, GCIH, or CCSK are highly valued.*Note: Candidates are required to obtain the AWS Certified Cloud Practitioner or AWS Certified Security - Specialty certification within the first year of employment if they do not already possess it.***Join Us:**If you are a passionate and strategic cybersecurity professional eager to make a tangible impact in a fast-paced and evolving environment, we encourage you to apply. Help us secure our future and our customers by bringing your expertise to our growing ASM team!**The Path to Success (Milestones):** **60-Day Milestones (The \"Connecting\" Phase):*** Become fully comfortable with core processes and tools (e.g., Vulnerability scanning and BAS tooling), including analysis, ticketing, and internal workflows.* Solidify relationships with key partners across the Enterprise and within Cyber teams.* Contribute to asset and domain baselining analysis by auditing public-facing inventory, subdomains, certificates, and IP ranges.**90-Day Milestones (The \"Contribution\" Phase):*** Assist with establishing alert routing from ASM tooling.* Perform comprehensive exposure analysis across ASM datasets to publish a risk-prioritized remediation roadmap targeting high-severity public risks.* Confidently engage with teams to work through remediation problems and ensure operational flow.* Design baseline ASM metrics to be delivered to security leadership.* Collaborate with Risk & Governance to formalize ASM SLAs, discovery cadences, and remediation mandates into corporate security policies.**6-Month Milestones (The \"Performance\" Phase):*** Optimize tool configuration of ASM tools to reduce scanner noise and false positives.* Become a strong, effective contributor who actively identifies and suggests areas for process improvement.* Take the lead on an internal team project, such as establishing runbooks for the ASM team, risk reduction campaign, or lead implementation of a recommended security hardening measure.* Operationalize risk-based prioritization correlating findings that impact the company at the vulnerability, configuration, assets exposure, and vendor level.* Establish continuous bi-directional validation by integrating ASM intelligence into BAS tooling and Red Team adversary emulation workflows.**12-Month Milestones (The \"Ownership\" Phase):*** Partner with Infrastructure and Cloud teams to enforce standard golden images, Infrastructure-as-Code (IaC) security guardrails, and automated stale-asset decommission routines.* Collaborate with Risk & Governance team to incorporate ASM controls into existing policies.* Scale team capabilities by mentoring junior analysts, defining future ASM technology roadmaps, and authoring program maturity benchmarks. Benefits and Compensation listed vary based on the location of your employment and the nature of your employment with SailPoint. As a part of the total compensation package, this role may be eligible for the SailPoint Corporate Bonus Plan or a role-specific commission, along with potential eligibility for equity participation. SailPoint maintains broad salary ranges for its roles to account for variations in knowledge, skills, experience, market conditions and locations, as well as reflect SailPoint’s differing products, industries, and lines of business. Candidates are typically placed into the range based on the preceding factors as well as internal peer equity. We estimate the base salary, for US-based employees, will be in this range from (min-max, USD):$92,200 - $155,406.00Base salaries for employees based in other locations are competitive for the employee’s home location.Benefits Overview1. Health and wellness coverage: Medical, dental, and vision insurance2. Disability coverage: Short-term and long-term disability3. Life protection: Life insurance and Accidental Death & Dismemberment (AD&D)4. Additional life coverage options: Supplemental life insurance for employees, spouses, and children5. Flexible spending accounts for health care, and dependent care; limited purpose flexible spending account6. Financial security: 401(k) Savings and Investment Plan with company matching7. Time off benefits: Flexible vacation policy8. Holidays: 8 paid holidays annually9. Sick leave10. Parental support: Paid parental leave11. Employee Assistance Program (EAP) and Care Counselors12. Voluntary benefits: Legal Assistance, Critical Illness, Accident, Hospital Indemnity and Pet Insurance options13. Health Savings Account (HSA) with employer contributionSailPoint is an equal opportunity employer and we welcome all qualified candidates to apply to join our team. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status, or any other category protected by applicable law.Alternative methods of applying for employment are available to individuals unable to submit an application through this site because of a disability. Contact View email address on click.appcast.io or mail to 11120 Four Points Dr, Suite 100, Austin, TX 78726, to discuss reasonable accommodations. NOTE: Any unsolicited resumes sent by candidates or agencies to this email will not be considered for current openings at SailPoint.
- J-18808-Ljbffr SailPoint Technologies Holdings, Inc.
Vacancy posted 5 days ago
Similar jobs that could be interesting for youBased on the Senior Attack Surface Management Analyst in Brooklyn, NY vacancy
- ...scale our contact center operations efficiently. As our Senior Workforce Management Analyst, you will manage forecasting, scheduling, and real-time... ...Operations leadership to build and maintain dashboards that surface workforce health and capacity trends. Identify staffing...SeniorTemporary workWork at officeRemote workShift work
- ...Prince George's County Government is seeking a Budget Management Analyst 3G in Largo, MD. This senior professional role leads budget development and analyses to support operating and capital decisions. You will supervise staff, provide technical guidance, and present findings...Senior
PRINCE GEORGES CO
Brooklyn, NY5 days ago - Performance Trust Capital Partners, LLC is seeking a Vendor Management Senior Analyst to support the creation, negotiation, implementation and management of vendor agreements in Chicago, with optional remote arrangements based on experience. The role involves data accuracy...SeniorRemote work
- Sacbar is seeking a Senior Analyst or Associate in Asset Management to join its growing real estate platform in a highly analytical role spanning portfolio management, financial modeling, budgeting, valuation, and asset-level decision-making across investments, development...SeniorWork at office
- Tatitlek Corporation in Arlington, VA seeks a senior Management Analyst 4 to conduct organizational studies, design systems, mentor junior staff, and produce manuals for efficient operations. You will lead major projects and guide others in the travel process while ensuring...Senior
$85k - $95k
Senior Management Analyst Full Time | Arlington, VA | Secret Clearance required SteelGate LLC is seeking a Senior Management Analyst to support user experience improvements, onboarding, training, and access coordination for a mission critical collaboration platform. This...SeniorFull timeWorldwideMonday to Friday- Select how often (in days) to receive an alert: SENIOR MANAGEMENT ANALYST I - SES - 42001090 Date: Aug 29, 2026 The State Personnel System is an E-Verify employer. For more information click on ourE-Verify Website . Requisition No:880722 Agency: Agriculture and Consumer...SeniorContract workWork at officeMonday to Friday
$67.5k - $112.5k
...Assurance (ORCA) Program, supporting TransUnion's Enterprise Risk Management Framework. Develop and maintain control testing methodologies,... ...cutting-edge technology. TransUnion's Internal Job Title: Sr Analyst, Risk Management Company: TransUnion LLC #J-18808-Ljbffr...SeniorFull timeTemporary workWork experience placementFlexible hours- Ecore is seeking a Senior Sales Specialist for Outdoor Athletic Surfacing to drive growth across the Western U.S. and Western Canada. The role requires deep OSST and outdoor track systems expertise and involves mentoring the sales team while building strategic partnerships...SeniorFor contractorsRemote work
$103.68k - $129.6k
...(Apex) powers innovation and the future of digital wealth management by building tech-forward solutions that help simplify, automate... ...Companies 2024- Presented by CNBC ABOUT THIS ROLE As a Senior Business Analyst within Apex's Tax and Cost Basis Client Integration...SeniorFull timeWork at officeWork from homeApex Fintech Solutions LLC
Brooklyn, NY3 days ago- Xceedance is seeking a Senior Business Analyst - Specialty Lines (Excess & Surplus) to translate nuanced E&S requirements into configurable system capabilities. You will work with underwriters, brokers, and operations to support flexible product modeling, regulatory compliance...SeniorFlexible hours
- Quantech is seeking an Exec Financial Mgmt Associate to provide comprehensive financial management services for the client across PPBE processes, budget execution and program reviews. The role requires deep government budgeting experience and a current Secret clearance...SeniorFull time
- Experience RequiredMinimum 10 years of experienceCapital MarketsBusiness Analysis discipline experienceBusiness analysis modelsAgile experienceSQL, GUI and wireframesRoles & ResponsibilitiesTake end to end ownership of requirement projectsSchedule/conduct/document requirement...Senior
- NEX-JOB-24486: Senior Business Analyst Copy URL Job Openings: 1 Experience: 10-15 Yrs Published On: Aug 31, 2026, 05:39 pm Job Description Role: Senior Business Analyst-3 Location: Austin, TX Work Location: 4601 W Guadalupe St., Austin, Texas 78751. Rate: Open all-inclusive...SeniorLocal area
$128k - $168k
Senior Business Analysts work directly with Activate team members at all levels of the organization, from fellow analysts to the managing directors and CEO. As essential team members, analysts are expected to contribute to team discussions and participate in client meetings...Senior- Required Skills A minimum of 4 years of experience with the following skill sets: ·Extensive business and data analysis ·Solid understanding of Microsoft technologies ·JIRA, Confluence, Balsamiq and MS Visio ·AWS, Quality Assurance and Automation ·Skill: Oracle...SeniorTemporary work
Delan Associates, Inc
Brooklyn, NY8 days ago - ...We are seeking a Senior Cards & Payments Business Analyst / Functional Consultant with 10+ years of experience and strong expertise in FGPP and payment... ..., configuration, and customer-facing stakeholder management. Key Responsibilities Analyze and troubleshoot FGPP...SeniorTemporary work
2T Consulting
Jersey City, NJ5 days ago - Job ID: 25496359Reference Number: 25-00410Title: Senior Business Analyst : Jersey City, NJ : Full-TimeJob Type: Full Time/ContractPosted Date: 2025-05-08Contact: Rohith ChigiriContact Email: ****@*****.*** Phone: (***) ***-****Company: HAN Staffing Hi, I...SeniorFull time
- Senior Business AnalystWe are seeking a Senior Business Analyst to serve as a Product Owner. This individual will work with product and operations stakeholders... ...requirement gathering, elicitation, and stakeholder management.Break down requirements into user stories for...Senior3 days per week
- Responsibilities Kforce has a client that is seeking a Senior Business Analyst in Jersey City, NJ. Key Responsibilities: Business Analysis & Stakeholder... ...planning, backlog refinement, and retrospectives Create, manage, and maintain user stories using Avio/ADIO or similar tools...SeniorHourly payContract work
- Position Summary The Senior Business Analyst leads acquisition integration and modernization tasks centered on the Department of the Air Force... ...-level role directs complex process models and knowledge management tools and coordinates technical collaboration across Air...SeniorTemporary work
- Senior Business AnalystDirect Client: New York City Department of Social ServicesLocation: Brooklyn, NY 11238Duration: 36 MonthsPosition... ...Requirements for program area’s Case processing and Case Management related Systems.Develops detailed systems operations designsDevelops...Senior
- We are seeking a Senior Business Analyst to lead digital transformation initiatives and bridge the gap between business objectives and technology... ..., collaborating with product and engineering teams, managing Agile delivery activities, and ensuring successful solution...Senior
- CSCI Consulting is seeking a Senior Financial Management Analyst to provide financial reporting, trading partner reconciliation, and intragovernmental transaction support for a Department of War (DoW / DoD) client located at the Pentagon. The ideal candidate will support...SeniorLocal area
- Description Position Overview The Senior Business Analyst plays a leading, cross functional role in helping NAC establish clear, practical business... ...adoption through documentation and communication. Change Management & Adoption Partner with teams as workflows and systems...SeniorFull timeWork at office
- ...customers and reduce cost-to-serve. Why Tally Group? A flat, non-hierarchical culture - direct visibility to senior leadership and execs, without layers of management in between Genuine investment in career growth and mentorship, not just a talking point - team members are...SeniorRemote workWorldwideShift work
$84.2k - $125.8k
...Massachusetts - Remote Picture Yourself at Pega: As a Senior Business/Reporting Analyst you will be a trusted business partner for Pega’s global... ...member of the Operations team. You will collaborate with the management team and deliver financial reporting and analysis of...SeniorRemote workFlexible hours- The Senior Business Analyst leads functional support and process improvement between the company's Accounting and Operations teams and its Microsoft... ...Additional functions and requirements may be assigned by management as it deems appropriate. This document does not constitute...SeniorContract work
$90k - $105k
...other and our customers like family. Summary/Objective: The Senior Business Analyst is a strategic, cross-functional partner who collaborates... ...-oriented demeanor during all interactions with peers, management, and clients to foster a productive team environment. Receive...SeniorWork at office- POSITION SUMMARY The Senior FP&A Analyst is the primary analytical partner to the Business Controller... ...data into insight—so that senior management and the Sales, Marketing, and Manufacturing... ...and plant margins and performance to surface the profitability drivers and risks...SeniorShift work
Do you want to receive more vacancies?
Subscribe and receive similar vacancies to Senior Attack Surface Management Analyst. Be the first to apply!
Related searches
- revenue growth management analyst Brooklyn, NY
- business analyst law firm Brooklyn, NY
- public sector business analyst Brooklyn, NY
- graduate business analyst Brooklyn, NY
- oracle business analyst Brooklyn, NY
- capital markets business analyst Brooklyn, NY
- erp business analyst Brooklyn, NY
- revenue management analyst Brooklyn, NY
- records management analyst Brooklyn, NY
- sharepoint business analyst Brooklyn, NY