Cybersecurity Analyst – Attack Surface Management & Attack Path Analysis

About this role

Not quite right? These jobs in Bengaluru match the same skills — apply to a few to improve your chances.

QA Engineer I (Python, Automation Test, UI, Rest API)

HPE

In OfficeBengaluru

Apply

QA Engineer I (Python, Automation Test, UI, Rest API)

HPE

In OfficeBengaluru

Apply

Software Engineer II - Python, Fast API, Django, Microservices, SQL, Azure, GIT

Blue Yonder

In OfficeBengaluru

Apply

Software Engineer Digital Claims Channel (ASP.NET Core + C# + MVC + Angular + Azure DevOps + Git + REST APIs + Agile Scrum

Assurant

In OfficeBengaluru

Apply

Skills you'll use

What you'll do

• Attack Surface Management
• Own and continuously evolve the enterprise external attack surface inventory — internet-facing assets, domains, IP ranges, cloud services, third-party integrations, and shadow IT
• Proactively discover unauthorized, unmanaged, or impersonation-related assets and investigate exposed services, SSL/TLS and DNS misconfigurations, open ports, cloud storage exposure, and leaked credentials surfaced through EASM tooling
• Track assets across the full discovery-to-remediation lifecycle and maintain authoritative records in the CAASM platform
• Attack Path Analysis & Threat Exposure Modeling
• Model attack paths across hybrid on-premises, cloud, and identity infrastructure (Active Directory, Entra ID, cloud IAM) using graph-based tooling to expose lateral movement and privilege escalation opportunities
• Prioritize remediation by attack path criticality, asset business value, and exploitability — beyond CVSS — and identify choke points whose remediation eliminates the greatest number of paths
• Partner with red team, purple team, and breach-and-attack simulation engagements to validate models, mapping findings to MITRE ATT&CK and CTEM program metrics
• Asset Intelligence & CAASM
• Build and maintain a unified, authoritative asset view by integrating telemetry across endpoints, cloud APIs, network scanners, CMDBs, and identity directories, enriched with criticality ratings and business ownership

Who can apply

• Bachelor's degree in Cybersecurity, Information Security, Computer Science, Engineering, or a related field
• 5+ years of progressive experience in Cybersecurity, Security Operations, Vulnerability/Exposure Management, or Attack Surface Management
• Hands-on experience across EASM (asset discovery and exposure analysis), CAASM (asset data integration and unified inventory), attack path / attack graph modeling across hybrid environments, and exposure-based prioritization that goes beyond basic CVSS
• Working knowledge of MITRE ATT&CK adversary techniques (initial access, lateral movement, privilege escalation, persistence)
• Hands-on experience with cloud environments (AWS, Azure, or GCP) and cloud-specific exposure risks (storage misconfigurations, IAM over-privilege, exposed APIs)
• Proficiency in scripting for automation and data analysis (Python preferred) and integrating security tools via APIs to build dashboards and workflows
• Strong written and verbal communication; able to translate technical risk into clear business language for senior stakeholders
• Certifications (Preferred)
• CISSP, CISM, or CISA
• Offensive/exposure-focused: CEH, OSCP, or GIAC (GPEN, GWAPT, GCIH)

Perks & benefits

About Applied Materials

Searching for “Applied Materials jobs” or “jobs at Applied Materials”? You’re in the right place.