ATTACK SURFACE REDUCTION ANALYST (GLOBAL)

Attack Surface Reduction Analyst (Global) - (Job Number .
) * Attack Surface Reduction AnalystWSP is a global consulting firm assisting public and private clients to plan, develop, design, construct, operate and maintain thousands of critical infrastructure projects around the world.
osition SummaryThe Attack Surface Reduction Analyst will play a critical role in enhancing our organization's cybersecurity posture by identifying, assessing, and mitigating vulnerabilities and threats across our digital environment.
This role involves a combination of strategic analysis, hands-on implementation, and collaboration with various teams to reduce our attack surface and improve our overall security resilience.
day in the lifeSpecific areas of responsibility may fall into any one of the following areas of Attack Surface Reduction .
Vulnerability Assessment .
Conduct thorough assessments to identify potential vulnerabilities and weaknesses in our systems, applications, and networks.
Attack Surface Analysis .
Analyze and map out the organization's attack surface, including endpoints, network components, applications, and cloud environments, to identify areas of risk.
Mitigation Strategies .
Develop and implement strategies and controls to reduce attack vectors and minimize potential entry points for malicious activities.
Risk Evaluation .
Continuously evaluate emerging threats and vulnerabilities and assess their impact on our attack surface.
Incident Response Support .
Collaborate with the Incident Response team to address and resolve security incidents related to identified vulnerabilities or attack vectors.
Collaboration .
Work closely with I&O, Risk, SOC, SecDevOps, and other relevant teams to integrate security practices into the development and deployment processes.
Security Tools .
Utilize and configure security tools and technologies for vulnerability scanning, threat intelligence, and attack surface monitoring.
Documentation & Reporting .
Maintain detailed documentation of vulnerabilities, risk assessments, and mitigation actions.
Prepare and present reports to stakeholders on security posture and risk status.
Continuous Improvement .
Stay current with industry trends, threat intelligence, and emerging technologies to continually enhance our attack surface reduction strategies.
eadership and People ResponsibilitiesDevelop positive working relationships with other team members and business partners and partners across teams to align with WSPs internal and external client demands.
rovide feedback on the governance process for continued improvement.
Finance/Budgetary ResponsibilitiesProvide feedback on tooling and identify additional needsPlan for expanse of security tools to cover ongoing needsEvaluation of license usage and potential growth * What you'll bring to WSPRequired7-+ years related experience in Security Operations, Network Security, Vuln.
Management or similar position.
achelor's degree or equivalent in Information Technology, Computer Science, Engineering, Data Sciences, or related fieldStrong knowledge of security assessment tools, vulnerability scanning, and penetration testingProficiency in security tools .
Microsoft Defender, Microsoft Defender EASM, BitSight, Cybel Angel and others.
trong analytical skills with a keen eye for detail and accuracyEffective communication skills, with the ability to clearly convey technical concepts to both technical and non-technical stakeholdersExperience with IT Governance frameworks such as COBIT, ITIL, NIST and ISO xExperience with risk management, including risk analysis, mitigation, and monitoring What sets you apartMaster's degree in information technology, Computer Science, Engineering, Data Sciences or related fieldSecurity+, CISSP, or other related certifications.
olombiaChile, Brazil, Mexico, Panama, Argentina, Trinidad and Tobago, PeruFull-timeRegular5Aug PM |