Attack Surface Reduction Analyst

What does this team do?

Attack Surface Reduction team helps and contribute to improve the security posture of H&M by operating within an Agile model. We play a crucial role in proactively identifying and help in mitigating potential security risks and vulnerabilities across H&Ms systems, applications, and networks, with the aim of preventing unauthorized access, data breaches, and other security incidents.

Job Summary: We are seeking a skilled and experienced Attack Surface Reduction Analyst with a strong background in penetration testing to join our cybersecurity team. The successful candidate will be responsible for identifying potential security risks and vulnerabilities in our organizations systems, applications, and networks, performing penetration testing, and facilitating and managing third-party penetration testing engagements.

Key Responsibilities:

• Conduct comprehensive vulnerability assessments (VA) and penetration tests (PT) on H&Ms systems, networks, and applications.
• Utilize industry-standard tools and methodologies to identify potential vulnerabilities and weaknesses in our attack surface.
• Collaborate with cross-functional teams to prioritize and remediate identified vulnerabilities in a timely manner.
• Experience in designing, implementing, and managing vulnerability management processes and workflows.
• Facilitate and manage penetration testing engagements with third-party vendors.
• Collaborate with other members of the cybersecurity team to develop and implement strategies to reduce our attack surface.
• Develop and maintain security policies and procedures for our organizations systems, applications, and networks.
• Monitor our organizations systems, applications, and networks for unauthorized access, suspicious activity, and other security threats.
• Stay up to date with the latest trends and developments in the field of cybersecurity, specifically related to attack surface reduction techniques

• Bachelors degree in computer science, information security, or a related field.
• 5-10 years of experience in vulnerability scanning, vulnerability management, and penetration tes