Senior Analyst, Digital Security

Waste Management, Inc. (WM)•Houston, TX

11h•$101,000 - $140,000

About The Position

WM is expanding its security exposure management capability through a dedicated Security Exposure Operations function that turns security findings into consistent, measurable outcomes. The Senior Analyst, Security Exposure Operations drives security findings from investigation and prioritization through ownership, disposition, and verified resolution. This role serves as a senior operational resource within the team, applying risk, criticality, threat context, and business impact to determine appropriate action. The Senior Analyst partners across Cybersecurity, Information Technology, and the business to resolve complex or significant findings, maintain accountability, improve operational processes, and use automation and AI to increase the efficiency and scale of security exposure operations.

Requirements

Bachelor's degree in Computer Science, MIS, Business Administration, or a similar area of study.
An additional four years of related experience may substitute for the bachelor's degree.
Five years of previous experience, or the listed certification path.
Strong knowledge of cybersecurity risk and vulnerability and exposure management principles.
Broad understanding of enterprise technology, including endpoints, servers, networks, cloud, applications, and identity.
Clear, concise written communication that holds up under audit and leadership review.
Ability to influence and drive accountability without direct authority.
Self-directed, with the ability to manage multiple priorities at once.
Must have or be willing to obtain a REAL ID or TSA-approved alternative if required to travel by air for business or access federal property.

Responsibilities

Investigate and prioritize security findings based on criticality, threat intelligence, exploitability, business impact, and existing controls.
Drive findings through ownership, remediation, risk acceptance, exception, or another appropriate disposition to verified closure.
Coordinate with Cybersecurity, IT, application, infrastructure, and business teams to resolve findings and escalate significant, overdue, disputed, or unowned issues.
Validate remediation and supporting evidence before closing findings.
Monitor aging, response targets, backlog health, and recurring exposures to identify systemic issues requiring corrective action.
Establish and continuously improve standards for investigation, prioritization, disposition, escalation, documentation, and closure.
Develop reporting and operational insights on risk, exposure trends, remediation progress, and emerging concerns.
Automate repetitive processes using AI, scripting, and workflow orchestration to improve investigation, routing, tracking, and reporting.
Integrate new exposure sources, security tools, and processes into Security Exposure Operations.