(Remote) Cyber Vulnerability Assessment Analyst Senior - Cyber Security

Performs cybersecurity vulnerability and exposure assessments across enterprise systems, applications, cloud platforms, identities, networks, and externally facing assets. Identifies, analyzes, prioritizes, and validates vulnerabilities, security weaknesses, attack-surface exposures, and control gaps to support measurable risk reduction. This senior-level position operates under minimal direction and provides mentoring and technical guidance to less experienced analysts.

Essential Functions

1. Assess and map enterprise exposure - evaluate vulnerabilities, misconfigurations, control gaps, and attack paths across infrastructure, applications, cloud platforms, identities, externally facing assets, and emerging AI systems and integrations.

2. Drive threat-informed prioritization - apply adversary intelligence, MITRE ATT&CK-mapped techniques, exploitability data, asset criticality, and business context to focus exposure reduction where it matters most.

3. Deliver clear findings and remediation guidance - conduct exposure analysis, produce actionable recommendations, and partner with asset owners and technology teams to drive measurable exposure reduction.

4. Evaluate control effectiveness - assess whether existing controls adequately address identified exposures; apply MITRE D3FEND to identify and evaluate compensating or mitigating controls, and validate that control decisions reduce exposure as intended.

5. Partner with the threat intelligence team - monitor adversary activity, emerging exposures, frontier AI-enabled threats, and industry developments; align exposure prioritization with MITRE ATT&CK-mapped adversary targeting and active campaigns to ensure remediation sequencing reflects realistic threat context; provide technical mentoring to developing analysts.

• Bachelor’s Degree plus five (5) years of related experience, or an equivalent combination of education and experience., * Degree in a Cyber Security, Computer Science, or Information Technology or related discipline.
• Experience with vulnerability management, exposure management, attack-surface management, cloud security, threat intelligence, security operations, or penetration testing.
• Relevant cybersecurity or information technology certification.

Penn State Health offers an exceptional benefits package including medical, dental and vision with no waiting period as well as a Total Rewards Program that highlights a few of the many additional offerings below:

• Be Well with Employee Wellness Programs, and Fitness Discounts (University Fitness Center, Peloton).
• Be Balanced with Generous Paid Time Off, Personal Time, and Paid Parental Leave.
• Be Secured with Retirement, Extended Illness Bank, Life Insurance, and Identity Theft Protection.
• Be Rewarded with Competitive Pay, Tuition Reimbursement, and PAWS UP employee recognition program.
• Be Supported by the HR Solution Center, Learning and Organizational Development and Virtual Benefits Orientation, Employee Exclusive Concierge Service for scheduling.

There are many ways to make an impact with one of the leading research, teaching, and clinical healthcare systems in the country. Through a combination of operational, corporate, clinical, and nonclinical roles, we are advancing excellence and innovation in health care together as one team. As Penn State Health continues to evolve for the future, we are committed to hiring dedicated employees who are passionate about delivering the best possible support across our entire integrated health system.

Within Penn State Health’s Shared Services Entity, we encourage our employees at every turn to continue their education and advancement. Numerous opportunities are available for professional development and career growth.

YOU TAKE CARE OF THEM. WE’LL TAKE CARE OF YOU. State-of-the-art equipment, endless learning, and a culture of excellence - that’s Penn State Health. But what makes our healthcare award-winning? That’s all you.

This job posting is a general outline of duties performed and is not to be misconstrued as encompassing all duties performed within the position. Eligibility for shift differential pay based on the terms outlined in company policy or union contract. All individuals (including current employees) selected for a position will undergo a background check appropriate for the position’s responsibilities.

Penn State Health is an Equal Opportunity Employer and does not discriminate on the basis of any protected class including disability or veteran status. Penn State Health’s policies and objectives are in direct compliance with all federal and state constitutional provisions, laws, regulations, guidelines, and executive orders that prohibit or outlaw discrimination.