Security Analyst II

Lennar•Waterford, FL

10d•Onsite

About The Position

The Security Analyst II will play a key role in the Attack Surface Management (ASM) team, supporting the organization’s risk-first approach to cybersecurity. This position will focus on identifying, prioritizing, and reducing vulnerabilities, proactively hunting threats, and validating defenses through red/purple team exercises. The analyst will collaborate with LTG, SOC/IR, GRC, and business units to deliver measurable risk reduction, improve detection and response capabilities, and support executive reporting. Depending on team needs, the analyst may take lead responsibilities in one or more of the following areas: Vulnerability Management, Threat Hunting, or Red Teaming.

Requirements

Bachelor’s degree in Cybersecurity, Computer Science, or related field (or equivalent experience).
3+ years of experience in one or more of the following: Vulnerability Management, Threat Hunting, Penetration Testing, or Red Teaming.
Familiarity with security tools: Rapid7, CrowdStrike, SIEM platforms, and red team/offensive frameworks.
Knowledge of frameworks: CVSS, MITRE ATT&CK, threat intelligence feeds (CISA KEV, OTX, etc.).
Strong technical aptitude and analytical mindset.
Excellent problem-solving and investigative skills.
Effective communication skills — ability to brief executives in business terms.
Strong collaboration with IT, SOC, and GRC teams.
Self-starter with the ability to balance competing deadlines.
Reliable, consistent, and punctual attendance required.

Nice To Haves

Preferred certifications: OSCP, CRTO, GPEN, CISSP, or equivalent.

Responsibilities

Conduct continuous vulnerability scanning (internal and external) using Rapid7 and other tools.
Validate findings and prioritize vulnerabilities based on exploitability, business criticality, and external exposure.
Track remediation efforts with LTG/system owners and enforce SLA timelines.
Generate operational dashboards and executive reports translating technical findings into business risk.
Support the development of vulnerability management SOPs, playbooks, and automation integrations.
Conduct hypothesis-driven hunts using CrowdStrike, SIEM data, AD logs, and threat intelligence feeds.
Investigate stealthy attacker behaviors such as lateral movement, credential abuse, or persistence.
Develop new detection logic in collaboration with SOC/IR to improve defensive coverage.
Maintain hunt playbooks, documentation, and lessons learned.
Research attacker tactics using MITRE ATT&CK and enrich detection engineering.
Share findings with SOC/IR and provide business-impact-focused summaries to leadership.
Plan and execute adversary emulation exercises aligned with MITRE ATT&CK.
Lead purple team exercises in collaboration with SOC/IR to validate detection and response.
Conduct controlled penetration testing of internal/external systems with a risk-first approach.
Document findings, track remediation with IT, and validate closure.
Research emerging adversary techniques and incorporate them into testing scenarios.
Translate red team results into business risk language for executives.