Cybersecurity Analyst – Attack Surface Management & Attack Path Analysis

About the role

Applied Materials, a global leader in materials engineering for chips and displays, is seeking a Cybersecurity Analyst to own the enterprise external attack surface inventory and drive attack‑path modeling across hybrid environments.

Key responsibilities

• Maintain and evolve the external attack surface inventory, including internet‑facing assets, domains, IP ranges, cloud services and shadow IT.
• Discover unauthorized or misconfigured assets, investigate SSL/TLS, DNS, open ports, cloud storage exposure and leaked credentials using EASM tooling.
• Model attack paths across on‑premises, cloud and identity infrastructure with graph‑based tools, prioritizing remediation by criticality and exploitability.
• Partner with red‑team, purple‑team and breach‑simulation engagements, mapping findings to MITRE ATT&CK and CTEM metrics.
• Integrate telemetry from endpoints, cloud APIs, network scanners and CMDBs to build a unified CAASM asset view.
• Develop dashboards, scripts (Python, REST APIs) and AI‑assisted analytics to report attack‑surface posture and risk to operational and executive audiences.
• Serve as subject‑matter expert during architecture reviews, onboarding and risk assessments, collaborating with Vulnerability Management, Cloud Security, SOC and Governance teams.

Required profile

• Bachelor’s degree in Cybersecurity, Computer Science, Engineering or related field.
• 5+ years progressive experience in Cybersecurity, Security Operations, Vulnerability/Exposure Management or Attack Surface Management.
• Hands‑on experience with EASM, CAASM, attack‑path/graph modeling and exposure‑based prioritization beyond CVSS.
• Working knowledge of MITRE ATT&CK techniques and cloud environments (AWS, Azure, GCP) with associated exposure risks.
• Proficiency in Python scripting and integrating security tools via REST APIs.
• Strong written and verbal communication to translate technical risk for senior stakeholders.

Required skills

• EASM (asset discovery and exposure analysis)
• CAASM (unified asset inventory)
• Attack‑path and attack‑graph modeling
• MITRE ATT&CK framework
• Cloud platforms: AWS, Azure, GCP
• Python programming
• REST API integration
• AI‑assisted analytics and dashboard creation

What we offer

• Supportive work culture encouraging learning, development and career growth.
• Health and wellbeing programs, personal and professional growth support, and comprehensive employee benefits.