> Markdown version of [/jobs/ext/3993622-sr-cybersecurity-analyst](https://www.wearedevelopers.com/jobs/ext/3993622-sr-cybersecurity-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Sr Cybersecurity Analyst

- **Company:** IQVIA
- **Location:** United States
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Microsoft Windows, Software System Penetration Testing, Automation of Tests, Cloud Computing Security, Configuration Management Databases, Cyber Security, Information Systems, Linux, Information Systems Security Architecture Professional, Python (Programming Language), Open Web Application Security, Windows PowerShell, Comptia Pentest+ CE, Software Vulnerability Management, Scripting, Mitre Att&ck, Cyber Threat Analysis, Information Technology
- **Published:** October 28, 2026
- **Apply:** https://www.healthjobsnationwide.com/node/15616712/apply-external

## About the Role

* Bachelor's Degree in Computer Science, a related field, or equivalent experience - Required
 * Equivalent work experience may substitute for degree - Preferred
 * 5 years of related work experience, including 3 years in vulnerability or exposure management - Required
 * Fluent English, written and spoken - Required
 * Hands-on experience with: Vulnerability Management / risk-based VM platforms; External Attack Surface Management (EASM); Exposure Management / CTEM platforms; Threat Intelligence Platforms (TIP); Cloud Security Posture Management (CSPM/CNAPP); Breach and Attack Simulation (BAS) or other exposure validation tools; IT Service Management (ITSM) and CMDB for remediation workflows - Required
 * Strong knowledge of CVSS, EPSS, known-exploited vulnerability catalogs, MITRE ATT&CK and OWASP Top 10 - Required
 * Working knowledge of at least one major public cloud provider, networking, Windows and Linux - Required
 * Scripting or API automation (Python, PowerShell) and data reporting / BI tools - Preferred
 * CISSP - Certified Information Systems Security Professional - Required
 * CISM - Certified Information Security Manager - Required
 * CRISC - Certified in Risk and Information Systems Control - Required
 * Technical certification such as GIAC (GEVA, GCED, GPEN), OSCP, CompTIA PenTest+ or a cloud security certification - Preferred

## Description

* Manage the operation of the Vulnerability Management, External Attack Surface Management and CTEM capabilities, from asset discovery and scanning through risk-based prioritization, remediation tracking and closure validation.
 * Provide leadership and direction to analysts within the area of responsibility; act as escalation point for complex, contested or zero-day exposures.
 * Oversee the development and implementation of functional governance (Standard Operating Procedures, remediation SLAs, risk-acceptance and exception workflows, Key Performance Indicators).
 * Act as controller of the penetration testing program: define scope and rules of engagement, coordinate internal and third-party testers, review report quality, and drive findings through remediation and retest.
 * Correlate threat intelligence with internal and external exposure data to prioritize remediation on what is exploitable and business-critical.
 * Provide regular performance updates and exposure risk reporting to Senior Leadership.
 * Act as Subject Matter Expert, working on issues where analysis of situations or data requires detailed knowledge of the area of responsibility.