Senior Info Security Analyst Attack Surface Lead

Mass General Brigham•Somerville, MA

4d•$93,954 - $136,739•Hybrid

About The Position

The Senior Information Security Analyst – Attack Surface Management Function Lead advances and coordinates Mass General Brigham’s Attack Surface Management (ASM) capability across vulnerability discovery, penetration testing, attack surface analysis, and attack simulation. The role helps develop a risk-driven, validation-focused capability that identifies meaningful exposure, prioritizes remediation based on exploitability and business impact, and connects findings to detection engineering, threat hunting, threat intelligence, and broader Cyber Defense priorities. The position requires a deeply technical security professional who can translate technical findings into actionable risk narratives, guide engineers through complex analysis, and help prioritize work based on business risk, asset criticality, threat relevance, and exploitability. The role works with technology owners and Cyber Defense teams to validate security controls and improve preventive, detective, and response capabilities. The position is hybrid, with onsite presence required one day per week and additional onsite days as needed for planned meetings or business needs. Remote work requires a stable, secure, quiet, and compliant workstation using MGB-provided equipment. The schedule is Monday–Friday during Eastern business hours, with 40 scheduled hours per week.

Requirements

5–7 years of relevant experience.
An associate’s degree or bachelor’s degree in a related field of study is required; experience may be considered in lieu of a degree.
Authority in cybersecurity concepts within the role’s domain.
Proficient understanding of cybersecurity concepts outside a specific individual domain.
Expertise with the tools and solutions supported by the team.
Ability to apply original and innovative thinking to produce new ideas.
Strong leadership, communication, and project management skills.
Strong decision-making skills, including weighing relative costs and benefits and identifying an appropriate path forward.
Ability to work Monday–Friday during Eastern business hours.
Onsite presence one day per week, with flexibility for additional planned onsite days for meetings or business needs.
For remote workdays, ability to use a stable, secure, quiet, and compliant workstation with MGB-provided equipment.

Nice To Haves

Relevant professional certifications, such as GCIH, GPEN, CISSP, OSCP, or similar credentials.
Experience in vulnerability management, offensive security, exposure analysis, penetration testing, or adversary simulation.

Responsibilities

Support and mature vulnerability discovery processes across infrastructure, applications, cloud environments, endpoints, and externally exposed assets; enrich findings with asset context, ownership, severity, exploitability, and business impact.
Analyze exposed assets, services, technologies, identities, ownership gaps, and environmental risk, and translate attack surface data into recommendations for reducing risk.
Support penetration testing, including scoping, methodology, technical validation, reporting, and remediation follow-up; document and risk-rank findings and connect them to broader Cyber Defense improvement opportunities.
Coordinate and support attack simulation and adversary emulation to validate security controls, response processes, and detection coverage; map activity to MITRE ATT&CK where appropriate and recommend capability improvements.
Prioritize remediation based on exploitability, asset criticality, business context, exposure, and threat relevance; communicate findings to technology owners and track remediation through appropriate workflows.
Partner with Security Detections, Threat Intelligence, and Threat Hunting teams so ASM findings inform detection engineering, hunt development, and intelligence-driven security priorities.
Develop and maintain repeatable processes, SOPs, playbooks, reporting standards, and quality expectations for ASM workflows; improve consistency, scalability, and operational maturity.
Support incident response by providing insight into potential attack paths, exploitable vulnerabilities, exposed assets, and relevant adversary techniques.
Create, review, and update documentation concerning ASM processes, findings, reports, remediation recommendations, playbooks, and security controls.
Communicate clearly in technical reports, long-form documentation, stakeholder updates, and executive presentations, adapting technical detail to the audience.
Maintain awareness of emerging vulnerabilities, attacker techniques, offensive security methods, exposure management practices, and relevant technologies.
Use Mass General Brigham values to guide decisions, actions, and behaviors.
Perform other duties as assigned within scope.