Analyze how individual exposures chain into viable attack paths toward critical assets
Build and operate a threat-informed prioritization model incorporating exploit availability and active campaigns
Map exposures to crown-jewel assets and critical business services to reflect remediation priorities
Validate whether prioritized exposures are exploitable and reachable using various analysis techniques
Maintain visibility across external, cloud, SaaS, and identity attack surfaces
Drive remediation across infrastructure and security partner teams
Produce technical and executive reporting on exposure trends for governance and senior leadership audiences

8+ years of experience in vulnerability management, attack surface management, exposure management, or offensive security
Demonstrated experience leading security programs or initiatives with governance and metrics
Strong ability to assess attack paths, exploitability, and business impact
Practical experience incorporating threat intelligence and exploit data into prioritization decisions
Solid understanding of vulnerabilities and exposures across operating systems, networks, cloud environments, and applications
Proven ability to drive remediation and influence cross-functional teams
Familiarity with security models and vulnerability scoring standards such as CVSS, EPSS, and CISA KEV
Strong written and verbal communication skills

Threat Exposure Management Analyst

Key skills