Senior Information Security Analyst – Attack Surface Management Lead

The Senior Information Security Analyst in Somerville is responsible for leading attack surface management activities including vulnerability discovery, penetration testing, and attack simulation. The role involves analysing exposed assets, coordinating penetration testing, and supporting attack simulations to identify and mitigate security risks. The analyst will prioritise remediation efforts, collaborate with threat hunting teams, and develop standard procedures to improve security operations. This position requires technical expertise in vulnerability management, offensive security, and industry-standard tools, alongside strong communication skills. The candidate must maintain awareness of emerging threats and vulnerabilities, translating technical insights into strategic recommendations. The role supports incident response and creates comprehensive documentation to ensure effective security practices and compliance.