Attack Surface Management (ASM) Cybersecurity Analyst

Black Lantern Security is a Services Oriented Company

---------------------------------------------------------

• Black Lantern Security is built around the ingenuity, passion, and determination of our Operators and Analysts
• No one "mastermind"
• No "cult of personality"
• Competitive compensation and benefits
• Healthy work-life balance
• Project-based engagements that play to the team's strengths

Attack Surface Management (ASM) Cybersecurity Analyst ### Location: Remote Travel: Up to 10% travel possible, both domestically and internationally Experience Level: Entry - Mid Level

##### Responsibilities:

• Perform data collection in support of ASM
• Identify vulnerabilities, communicate risk, and verify root cause
• Perform verification/validation testing for vulnerabilities in external-facing web sites, web applications, and services; demonstrate exploitation steps and verify remediation/fixes
• Develop custom tools and small utilities
• Generate comprehensive reports, including detailed findings, exploitation procedures, and mitigation techniques

##### Preferences:

* Strong understanding of OWASP common vulnerabilities and testing methodologies * Ability to communicate risks caused by web-based application vulnerabilities * Possess basic cybersecurity professional certifications (Security+, GSEC, SSCP) * Experience with ASM/OSINT tools and utilities (BurpSuite, AMASS, PassiveTotal, SecurityTrails, Nuclei, Recon-NG, GoWitness, MassDNS, Masscan, Censys.io, etc.) ##### Requirements:

• Must be US citizen (must be willing to submit to federal, state, and local background checks as well as other requirements)
• Familiarity with common web vulnerabilities including: XSS, XXE, SQL Injection, Deserialization Attacks, Path Traversal Attacks, Remote Execution Flaws, and Authentication Flaws
• Understanding of common web application frameworks and web-based APIs
• Experience with one or more scripting languages such as Bash, Python, Perl, PowerShell, etc.
• Solid understanding of Open-Source Intelligence (OSINT) gathering techniques in support of ASM (subdomain discovery/enumeration, service and application enumeration, and content discovery, etc.)
• Ability to manage, organize, analyze, and present substantial amounts of data
• Strong written and verbal English language skills
• Capable of working effectively and efficiently with minimal supervision