Threat Exposure Management Analyst

Fiserv
United States
Workplace: OnsiteFull timeUSD 110,000 - 186,000 annuallyFunction: Administration & Executive AssistanceExperience: 8+ yearsSkills: ["Communication","Leadership","Problem-solving"]

Lead and advance the organization’s exposure management program within the Attack Surface Management team by prioritizing real-world risk over CVSS, linking exposures to critical assets, and driving cross-functional remediation. Employ threat-informed models using exploit availability, active campaigns, and in-wild indicators; report risk trends to governance and senior leadership and ensure ongoing risk reduction.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Fiserv
Fiserv
2 months ago

Threat Exposure Management Analyst

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 4 hours agoStatus: Live

Job Summary

Lead and advance the organization’s exposure management program within the Attack Surface Management team by prioritizing real-world risk over CVSS, linking exposures to critical assets, and driving cross-functional remediation. Employ threat-informed models using exploit availability, active campaigns, and in-wild indicators; report risk trends to governance and senior leadership and ensure ongoing risk reduction.
Location: United States
Workplace: Onsite
Employment Type: Full time
Job Function: Administration & Executive Assistance

Key Responsibilities

  • •Analyze how exposures chain into attack paths toward critical assets and shift prioritization from isolated findings to path-based risk.
  • •Build and operate a threat-informed prioritization model using exploit availability, active campaigns, and exploitation-in-the-wild indicators to rank exposures by real-world risk.
  • •Map exposures to crown-jewel assets and critical services; define and report metrics showing exposure reduction (mean time to remediat e by risk tier, attack-path closure).
  • •Validate prioritized exposures for exploitability and reachability using attack-path analysis, breach-and-attack simulation, and offensive security findings.
  • •Assess effectiveness of compensating controls and translate red-team/purple-team findings into validated exposure priorities.
  • •Maintain visibility across external, cloud, SaaS, and identity attack surfaces; coordinate with platform owners.
  • •Drive remediation across infrastructure and security teams by establishing ownership, SLAs, and escalation paths for cross-boundary risk.
  • •Produce technical and executive reporting on exposure trends and risk reduction in business terms for governance.
Travel: Low travel

Pay and Benefits

Salary: USD 110,000 - 186,000 annually

Key Requirements

  • •8+ years of experience in vulnerability management, attack surface management, exposure management, offensive security, or closely related disciplines.
  • •Experience leading security programs or initiatives with governance, metrics, and cross-functional stakeholder engagement.
  • •Strong ability to assess attack paths, exploitability, and business impact beyond CVSS scoring and ticket-based vulnerability tracking.
  • •Practical experience incorporating threat intelligence and exploit data (EPSS, CISA KEV, exploitation-in-the-wild) into prioritization decisions.
  • •Solid understanding of vulnerabilities and exposures across operating systems, networks, cloud environments, identity platforms, and applications, and how they combine into attack paths.
Experience:8+ yearsCybersecurityVulnerability managementAttack surfaceExposure managementOffensive security
Skills:CommunicationLeadershipProblem-solving
Tech Stack:EPSSCISA KEVMITRE ATT&CKCVSSBreach-and-attack simulationAttack surface managementOffensive security

Company Brief

Fiserv
Provides payments, processing services, risk management, and core banking technology to financial institutions, merchants, and businesses worldwide, enabling digital payments, account processing, and financial services integration.
Industry: Fintech Infrastructure
Company Size: Enterprise (1,001+ employees)
Revenue: USD 1B+
Growth: Public Company
Valuation: Public Company (Market Cap in USD)
Funding: IPO / Publicly Listed
Headquarters: Brookfield, United States
Founded: 1984
WebsiteLinkedIn