Threat Exposure & Attack Surface Analyst (R-00191)

 

 

 

 

 

True Zero is seeking a Threat Exposure & Attack Surface Analyst to help identify, validate, and prioritize the cybersecurity risks that present the greatest operational threat to the National Institutes of Health (NIH). This role sits at the intersection of vulnerability management, threat intelligence, penetration testing, and attack surface management to provide a comprehensive understanding of enterprise cyber exposure.

Rather than treating vulnerabilities as isolated technical findings, this position evaluates the complete operational picture by correlating Known Exploited Vulnerabilities (KEVs), threat intelligence, attack paths, asset criticality, penetration testing results, and system context to determine where the organization is most vulnerable to real world attack. The analyst works closely with vulnerability management, incident response, security engineering, RMF, and system owners to ensure remediation efforts focus on the risks most likely to impact NIH’s mission.