IT Security Analyst

Project description

Join Our Team: Innovating Health Care with Cutting-Edge Technology

We are looking for an experienced Senior Security Architect to support ESRO's Cybersecurity Transformation Program. The role focuses on designing and governing enterprise Vulnerability Exposure Management and external attack surface security capabilities, strengthening visibility into internet-facing assets, identifying emerging threats, and driving security risk reduction across complex enterprise environments.

Responsibilities

• Design and oversee enterprise Vulnerability Exposure Management and external attack surface security programs.
• Assess security risks across internet-facing infrastructure, cloud services, DNS, SMTP, TLS certificates, and SaaS environments.
• Evaluate threat intelligence, dark web monitoring, and external vulnerability scanning capabilities to identify emerging exposures.
• Drive security architecture decisions, risk prioritization, and cross-functional initiatives across enterprise teams.
• Establish security standards, communicate risks to executive stakeholders, and leverage enterprise-approved AI tools to improve security operations and decision-making.
• Skills Must have Mandatory Skills: Security Architecture Vulnerability Exposure Management External Attack Surface Management Enterprise Security Cloud Security DNS / SMTP / TLS SaaS Security Threat Intelligence Dark Web Monitoring Vulnerability Scanning Email Security Proofpoint Security Risk Management Stakeholder Management Mandatory Skills Description 8+ years of experience in security architecture, enterprise security, or platform security roles.
• Proven experience designing or overseeing Vulnerability Exposure Management and external exposure programs.
• Strong understanding of internet-facing infrastructure, cloud services, DNS, SMTP, TLS certificates, SaaS exposure, threat actor reconnaissance, exploitation techniques, dark web monitoring, threat intelligence, and external vulnerability scanning.
• Knowledge of email security platforms, including Proofpoint, is required.
• Demonstrated ability to operate in ambiguous environments, influence cross-functional teams, and communicate complex security concepts to technical and executive audiences.
• Associate's degree in Computer Science, Information Security, Engineering, or equivalent practical experience required.
• Experience within healthcare or other highly regulated industries.
• Hands-on or architectural expertise with Proofpoint, Bright, Xpanse, Tenable, and Splunk or similar SIEM platforms.
• Familiarity with HIPAA, NIST, ISO, and SOC compliance frameworks.
• Experience influencing enterprise security platforms, advising executive stakeholders on risk visibility and prioritization, and mentoring security engineering or architecture teams.
• Experience with enterprise-approved AI tools, including GitHub Copilot, Microsoft 365 Copilot, and other GenAI platforms, is expected, with a minimum of 90% weekly usage to support productivity, documentation, analysis, and continuous improvement.
• Nice to have Exceptional communication skills.
• Ability to deliver exceptional customer service with a positive attitude.
• Other Languages English: C1 Advanced Seniority Regular Remote United States, United States of America Req.
• VR-125566 Application Security Cross Industry Solutions 02/11/2026 Req.
• VR-125566