Attack Surface Management (ASM) Cybersecurity Analyst
Black Lantern Security is a Services Oriented Company • Black Lantern Security is built around the ingenuity, passion, and determination of our Operators and Analysts • No one "mastermind" • No "cult of personality" • Competitive compensation and benefits • Healthy work-life balance • Project-based engagements that play to the team's strengths Attack Surface Management (ASM) Cybersecurity Analyst Location: Remote Travel: Up to 10% travel possible, both domestically and internationally Experience Level: Entry - Mid Level Responsibilities: • Perform data collection in support of ASM • Identify vulnerabilities, communicate risk, and verify root cause • Perform verification/validation testing for vulnerabilities in external-facing web sites, web applications, and services; demonstrate exploitation steps and verify remediation/fixes • Develop custom tools and small utilities • Generate comprehensive reports, including detailed findings, exploitation procedures, and mitigation techniques Preferences: • Strong understanding of OWASP common vulnerabilities and testing methodologies • Ability to communicate risks caused by web-based application vulnerabilities • Possess basic cybersecurity professional certifications (Security+, GSEC, SSCP) • Experience with ASM/OSINT tools and utilities (BurpSuite, AMASS, PassiveTotal, SecurityTrails, Nuclei, Recon-NG, GoWitness, MassDNS, Masscan, Censys.io, etc.) Requirements: • Must be US citizen (must be willing to submit to federal, state, and local background checks as well as other requirements) • Familiarity with common web vulnerabilities including: XSS, XXE, SQL Injection, Deserialization Attacks, Path Traversal Attacks, Remote Execution Flaws, and Authentication Flaws • Understanding of common web application frameworks and web-based APIs • Experience with one or more scripting languages such as Bash, Python, Perl, PowerShell, etc. • Solid understanding of Open-Source Intelligence (OSINT) gathering techniques in support of ASM (subdomain discovery/enumeration, service and application enumeration, and content discovery, etc.) • Ability to manage, organize, analyze, and present substantial amounts of data • Strong written and verbal English language skills • Capable of working effectively and efficiently with minimal supervision Apply tot his job