Security Analyst

Position Overview

We are seeking an experienced Security Analyst to play a foundational role in launching and scaling our new Continuous Threat Exposure Management (CTEM) program. Working within a focused team of 5, you will bridge technical integration, data analysis, and cross-functional collaboration.

This is not a routine administrative role. We are looking for a hands-on practitioner who goes beyond simply setting up scanning tools-someone who understands end-to-end vulnerability workflows, API data integrations, and system administration to help get this critical product off the ground.
Key Responsibilities
Data Integrations & Solution Delivery

• Lead technical onboarding, configuration, and optimization of the new exposure management platform.
• Coordinate data source integrations across cloud, identity, infrastructure, and vulnerability scanners, ensuring API connectivity and tool maintenance.
• Validate ingestion accuracy, asset correlation, and exposure signal quality across diverse environments.
• Partner with engineering, cloud, IAM, and application teams to define operational workflows, reporting structures, and remediation processes aligned with CTEM cycles.
• Document integration steps, system behaviors, and operational procedures to drive long-term program maturity.

Attack Surface & Asset Visibility

• Discover, map, and inventory internal and external attack surfaces across cloud, network, application, and SaaS environments.
• Identify unknown, shadow, misconfigured, or abandoned assets contributing to organizational risk.
• Monitor asset changes to maintain continuous visibility into evolving enterprise environments.

Validation, Prioritization & Remediation Support

• Prioritize remediation efforts based on active threats, exploitability, data sensitivity, operational criticality, and compensating controls.
• Partner with technical teams to guide remediation plans, track progress, and verify full resolution of exposures.
• Identify systemic or recurring vulnerabilities and recommend long-term architectural improvements.
• Analyze privilege misuse, identity sprawl, and authentication weaknesses in collaboration with IAM teams.

Program Enablement & Governance

• Help scope CTEM cycles and define focus areas (e.g., cloud posture, identity exposures, internet-facing risks).
• Provide clear metrics and reporting to leadership regarding exposure trends, risk posture changes, and remediation performance.

Qualifications & Requirements

• Core Expertise: Strong understanding of attack surface management, vulnerability management, cloud security, identity security, and network fundamentals.
• CTEM Experience: Experience with CTEM-aligned workflows or continuous risk-reduction programs.
• Technical Acumen: Blend of system administration, data integration, and API connection experience, paired with a solid background in Information Security or Risk Management.
• Tooling Proficiency: Hands-on experience with exposure, vulnerability, or ASM tooling (such as ASM, CSPM, CIEM, VM scanners, EASM, or attack path analysis tools).
• Threat Knowledge: Working knowledge of threat modeling, attacker techniques, and modern exploitation trends.
• Data & Soft Skills: Exceptional ability to interpret complex exposure data and translate it into actionable insights, complemented by strong stakeholder management, problem-solving, and adaptability.

Equal Opportunity Employer / Disabled / Protected Veterans

The Know Your Rights poster is available here:

The pay transparency policy is available here:

For temporary assignments lasting 13 weeks or longer, AllSTEM Connections is pleased to offer major medical, dental, vision, 401k and any statutory sick pay where required.

We are committed to working with and providing reasonable accommodations to individuals with disabilities. If you need a reasonable accommodation for any part of the employment process, please contact your staffing representative who will reach out to our HR team.

AllSTEM Connections participates in the E-Verify program in certain locations as required by law. Learn more about the E-Verify program.

We also consider for employment qualified applicants regardless of criminal histories, consistent with legal requirements, including, if applicable, the City of Los Angeles' Fair Chance Initiative for Hiring Ordinance. Pursuant to applicable state and municipal Fair Chance Laws and Ordinances, we will consider for employment-qualified applicants with arrest and conviction records, including, if applicable, the San Francisco Fair Chance Ordinance. For Los Angeles, CA applicants: Qualified applications with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act.

Additional Skills

(none specified)


AllSTEM Representative Contact Info

Account Executive:


Nichols


Branch Phone:


View phone number on click.appcast.io


Location:


Ontario, CA