Cyber Exposure Management Analyst

Employment Type: Full-Time

Experience Level: Analyst / Experienced Professional

Experience Required: 3–5 years

About the Role

We are seeking a Cyber Exposure Management Analyst to coordinate the enterprise vulnerability and exposure management lifecycle. This role will identify and assess cyber exposures, establish risk-based priorities, collaborate with asset owners on remediation, and validate that corrective actions effectively reduce risk.

The adecuado candidate has hands-on experience in vulnerability management and understands asset criticality, external exposure, misconfigurations, threat activity, and potential attack paths across infrastructure, endpoints, cloud, identity, applications, and network environments.

Key Responsibilities

- Coordinate the vulnerability management lifecycle, including asset discovery, assessment, prioritization, remediation, validation, exceptions, and closure.
- Operate and optimize vulnerability and exposure management platforms across servers, endpoints, network infrastructure, cloud workloads, applications, and containers.
- Prioritize vulnerabilities based on exploitability, external reachability, asset criticality, business impact, and available mitigations.
- Partner with Security Operations and Incident Response teams to evaluate actively exploited vulnerabilities, zero-days, and major security advisories.
- Collaborate with infrastructure, cloud, application, identity, and security teams to drive timely remediation.
- Track risk exceptions, compensating controls, accountable owners, review dates, and governance approvals.
- Identify internet-facing assets and potential attack paths to critical systems.
- Assess the impact of emerging threats on enterprise assets and coordinate urgent remediation through closure.




- Support exposure management initiatives involving cloud services, applications, containers, APIs, software dependencies, and AI-enabled technologies.
- Develop reports covering asset coverage, critical and exploited exposures, overdue remediation, verified closures, and open exceptions.
- Automate vulnerability enrichment, correlation, ticket creation, and reporting when appropriate.
- Support vulnerability management policies, remediation SLAs, risk acceptance processes, security standards, audits, and control requirements.

Required Qualifications
- 3–5 years of professional experience in cybersecurity, vulnerability management, exposure management, security engineering, security operations, or a related field.
- Experience coordinating vulnerability management activities and working with asset owners through remediation and closure.
- Hands-on experience with platforms such as Tenable, Qualys, Rapid7, Microsoft Defender Vulnerability Management, or similar technologies.
- Knowledge of CVEs, CVSS, CISA KEV, EPSS, attack vectors, compensating controls, risk acceptance, and remediation validation.
- Experience assessing vulnerabilities across Windows and Linux systems, network infrastructure, applications, and enterprise technologies.
- Ability to interpret security advisories, exploit information, threat intelligence, and technical research.
- Strong understanding of networking, operating systems, authentication, access control, patching, system hardening,



and common attack techniques.
- Strong analytical, organizational, and communication skills.
- Ability to explain technical risks and priorities to technical and non-technical stakeholders.

Preferred Qualifications
- Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Information Systems, or a related field; equivalent experience will also be considered.
- Security or cloud certifications.
- Experience with cloud, container, application, or external attack surface security.
- Experience integrating vulnerability platforms with CMDB, SIEM, SOAR, EDR/XDR, ticketing, cloud security, or asset management platforms.
- Familiarity with risk-based prioritization, asset inventory, attack paths, and security frameworks.
- Experience with scripting and automation for security operations.
- Professional-level english proficiency

Skills and Abilities
- Advanced problem-solving and analytical skills.
- Clear and effective communication.
- Ability to collaborate with stakeholders at different organizational levels.
- Self-motivated and capable of working with minimal supervision.
- Ability to handle sensitive asset and vulnerability information appropriately.
- Strong follow-through and attention to detail.
- Ability to build trusted relationships and maintain accurate remediation data.

Apply today to join a cybersecurity team focused on reducing enterprise risk through practical, intelligence-driven exposure management. Sueldo: $55,000.00 al mes

Pregunta(s) de postulación

- ¿Qué nivel de inglés dominas?
- ¿Qué plataformas de gestión de vulnerabilidades has utilizado —por ejemplo, Tenable, Qualys, Rapid7 o Microsoft Defender— y en qué tipo de activos las has aplicado?

Lugar de trabajo: Empleo remoto

📌 Cyber Exposure Management Analyst (México)
🏢 Empleos8
📍 México