EASM Validation Analyst

Vanguard

EASM Validation Analyst responsible for external security findings validation and remediation across various platforms. Roles involve collaboration with multiple teams and management of risk reduction workflows.

Posted 5/22/2026full-timeMalvern • North Carolina, Pennsylvania, Texas • 🇺🇸 United StatesJuniorMid-LevelWebsite

Tech Stack

Tools & technologies

CloudCyber SecurityPythonServiceNow

About the role

Key responsibilities & impact

Triage and validate findings from EASM tools, VDP submissions, and GenAI-driven detection capabilities
Perform technical validation to eliminate false positives and confirm exploitability risk
Assign severity based on risk frameworks (CVSS, EPSS, KEV, asset criticality)
Identify and attribute ownership to responsible application, infrastructure, or business teams
Enrich findings with evidence, proof-of-concept, and remediation guidance
Drive findings through remediation workflows, tracking SLA adherence and escalation
Correlate findings across multiple sources to identify systemic risks or duplicate exposures
Maintain and improve triage playbooks, workflows, and standard operating procedures
Administer and support EASM and VDP platforms (e.g., Censys, Defender EASM, HackerOne, BugCrowd)

Requirements

What you’ll need

2-5 years of experience in cybersecurity, vulnerability management, or application security
Strong understanding of web, API, cloud, and network security concepts
Experience with vulnerability triage, validation, and risk prioritization
Familiarity with EASM tools and vulnerability management platforms
Knowledge of VDP or bug bounty programs and triage methodologies
Strong analytical and problem-solving skills.

Benefits

Comp & perks

Health insurance
401(k) matching
Flexible working hours
Paid time off
Professional development opportunities

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

vulnerability managementrisk prioritizationtechnical validationtriage methodologiesexploitability risk assessmentevidence enrichmentremediation guidancecorrelation of findingsSLA trackingfalse positive elimination

Soft Skills

analytical skillsproblem-solving skills