Threat Exposure Analyst

NorthAB LLC•Remote work MI, MI

21h•$70,000 - $110,000•Remote

About The Position

North is seeking a detail-oriented Threat Exposure Analyst to join its Cybersecurity team. The role helps protect North’s payment processing platform, cloud environments, and internal infrastructure by identifying and analyzing vulnerabilities and monitoring attack surface posture trends. The analyst works closely with engineering, cloud infrastructure, and IT teams, using enterprise security tools such as Wiz and Tenable to track risk and advocate for timely remediation. The role also applies data science and algorithmic approaches—including statistical analysis, risk modeling, and automation—to identify trends and opportunities to improve security through process and technology changes.

Requirements

Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Data Science, or a related technical field, or equivalent practical experience.
At least 3 years of hands-on experience in vulnerability management, data science, or security analytics.
Direct experience operating enterprise scanning platforms, specifically Wiz and/or Tenable.
Solid understanding of the vulnerability management lifecycle, CVEs, CVSS scoring, common attack vectors, and vulnerability exploitation.
Working knowledge of AWS security, including VPC/network, S3, EC2, and container services, and common cloud misconfigurations and attack paths.
Ability to analyze large vulnerability and infrastructure datasets using statistical methods, identify trends and anomalies, and produce clear, actionable reporting.
Proficiency in Python and SQL, including libraries such as pandas, and experience using REST APIs to collect, transform, and analyze data and automate routine tasks.
Excellent verbal and written communication skills for building relationships across technical teams and providing executive reporting.

Nice To Haves

5 years of relevant experience in vulnerability management, cybersecurity, data science, information technology, or a similar field.
Experience in fintech, payment processing, or another highly regulated environment.
Experience administering and maturing an enterprise scanning platform, particularly Wiz and/or Tenable.
Understanding of Windows and Linux operating systems, cloud security fundamentals (AWS, Azure, or GCP), and/or enterprise networking.
Familiarity with payment industry standards and security frameworks such as PCI-DSS, NIST Cybersecurity Framework, and CIS Benchmarks.
Experience applying machine learning or predictive modeling techniques, such as scikit-learn, to security or operational data.
Experience with data visualization and BI tools such as Power BI, Tableau, or Grafana, and data warehouses or SIEM platforms.
Experience using ticketing and project tracking tools such as Jira, including automating ticket creation and updates.
Additional scripting experience with PowerShell or Bash.

Responsibilities

Operate, maintain, and assist in configuring scanning platforms such as Wiz and Tenable across cloud assets, containers, data centers, network infrastructure, and endpoints.
Build and maintain automated pipelines that collect scanner, asset, and threat intelligence data through APIs and bring it into a unified, analysis-ready dataset.
Automate reporting, ticketing, and other repeatable workflows.
Analyze vulnerability data and develop data-driven models and scoring logic that consider exploit likelihood, threat intelligence, asset criticality and exposure, business context, and payment industry risk factors beyond CVSS.
Reduce false positives through rules-based and statistical methods.
Liaise with engineering, IT, and operations teams to explain and contextualize security risks and prioritize remediation efforts.
Track remediation progress, analyze trends and remediation velocity, communicate risk posture to leadership, and maintain dashboards, reports, and KPIs.
Support security audits and compliance efforts, including PCI-DSS, by providing evidence of regular vulnerability scanning and remediation.
Identify gaps in scanning, visibility, and security posture; create improvement plans; and measure the impact of process and technology changes.