Cyber Defense Analyst

Attack Surface Validation & Exposure Engineer at EY managing vulnerabilities and developing solutions. Collaborating with global teams to enhance security posture against evolving threats.

Posted 7/22/2026full-timeHoboken • New Jersey • 🇺🇸 United StatesSeniorLeadWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in vulnerability management and offensive security, with a strong focus on building scalable solutions and operationalizing continuous validation processes. Proficient in analyzing security posture data and communicating effectively with senior stakeholders to drive remediation efforts.

Highest-signal resume keywords

Vulnerability ManagementOffensive SecurityAttack Path AnalysisData AnalysisAI Exposure Assessments

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Vulnerability DetectionExploit-Chaining WorkflowsAutomated Attack-Path DiscoveryContinuous Offensive ValidationScalable Solution DevelopmentSecurity EngineeringData EvaluationRemediation RecommendationsThreat Intelligence IntegrationControl Failures Analysis

Soft Skills

Analytical SkillsCommunication SkillsIndependent OperationPriority ManagementStakeholder Engagement

Industry Keywords

Cyber Threat IntelligenceExposure ManagementSecurity PostureMaterial RiskMisconfigurations

About the role

Key responsibilities & impact

Design and engineer automated attack-path discovery and validation capabilities
Build scalable vulnerability detection and verification pipelines that combine enterprise scanning sources with custom validation logic
Develop controlled exploitation and exploit-chaining workflows to safely demonstrate real attacker outcomes
Operationalize continuous offensive validation by engineering testing routines that can run with minimal human prompting
Fuse Vulnerability Intelligence and Cyber Threat Intelligence into detection and prioritization—tracking exploit maturity/availability, active exploitation signals, and technique trends, etc
Produce high-fidelity deliverables that enable remediation and decisioning: reproducible evidence, attack-path narratives, severity/exploitability rationale, compensating control notes, and clear remediation/mitigation recommendations
Partner across Red Team, Exposure Assessment, Threat Detection, and VM stakeholders

Requirements

What you’ll need

Minimum combined 8 years of experience in vulnerability management, exposure management, offensive security, and security engineering
Demonstrated experience analyzing vulnerability and security posture data
Deep understanding of attack paths, misconfigurations, and control failures that lead to material risk
Proven ability to build scalable solutions to vulnerability and exposure challenges
Experience operating at a strategic level, balancing technical depth with organizational risk context
Strong analytical skills with the ability to evaluate large volumes of data to influence solution development
Excellent communication skills, with comfort engaging senior stakeholders and security leadership
Ability to manage competing priorities and operate independently in a complex, global environment
Ideally, you’ll also have experience leveraging AI to conduct exposure assessments.

Benefits

Comp & perks

Health insurance
Professional development opportunities