Threat Exposure Analyst

Job Summary

Working remotely in a full-time capacity, the Threat Exposure & Attack Surface Analyst will identify, validate, and prioritize cybersecurity risks for the National Institutes of Health (NIH), focusing on vulnerability management, threat intelligence, and attack surface management.

Key responsibilities

• Analyze enterprise vulnerability data to identify the highest priority cyber exposures across the NIH environment
• Correlate vulnerability findings with threat intelligence and operational risk to improve remediation prioritization
• Develop technical analyses and operational reporting to communicate enterprise cyber exposure to technical and executive audiences

Required qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related technical discipline
• Three or more years of experience in vulnerability management, cyber threat intelligence, or enterprise risk analysis
• Experience analyzing vulnerability data and translating technical findings into operational risk
• Working knowledge of CVSS, CVEs, CISA KEVs, and MITRE ATT&CK
• Understanding of attack paths, privilege escalation, and common adversary tactics