Threat Exposure Analyst

Threat Exposure Analyst

North - Remote

North is seeking a detail-oriented Threat Exposure Analyst to join our Cybersecurity team. In this role, you will help protect our payment processing platform, cloud environments, and internal infrastructure by identifying and analyzing vulnerabilities and monitoring trends in attack surface posture.

Working closely with engineering, cloud infrastructure, and IT teams, you will leverage enterprise security tools (such as Wiz and Tenable) to track risk and diplomatically advocate for timely remediation. You will also apply data science and algorithmic approaches, including statistical analysis, risk modeling, and automation, to identify trends and opportunities for improvement through process and technology changes.

What you'll do:

• Vulnerability Identification & Scanning: Operate, maintain, and assist in configuring scanning platforms (Wiz, Tenable) across cloud assets, containers, data centers, network infrastructure, and endpoints.
• Data Engineering & Automation: Build and maintain automated pipelines that pull scanner, asset, and threat intelligence data via APIs into a unified, analysis-ready dataset, and automate reporting, ticketing, and other repeatable workflows.
• Analysis & Prioritization: Analyze large volumes of vulnerability data and develop data-driven models and scoring logic that go beyond CVSS, incorporating exploit likelihood (e.g., EPSS, CISA KEV), threat intelligence, asset criticality and exposure, business context, and payment industry risk factors. Reduce false positives through rules-based and statistical methods.
• Remediation Advocacy: Act as a liaison to engineering, IT, and operations teams, using data and clear evidence to contextualize security risks and prioritize response efforts.
• Tracking & Metrics: Track remediation progress, analyze trends and remediation velocity, communicate risk posture to leadership, and maintain dashboards, reports, and key performance indicators (KPIs).
• Compliance Support: Support security audit and compliance efforts (such as PCI-DSS) by providing evidence of regular vulnerability scanning and remediation.
• Continuous Improvement: Identify and create plans to reduce gaps in scanning, visibility, and security posture, and measure the impact of process and technology changes using data.

What we need from you: 

Education and Experience

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Data Science, or a related technical field (or equivalent practical experience).
• 3 years of hands-on experience in vulnerability management, data science, or security analytics.
• Direct experience operating enterprise scanning platforms, specifically Wiz and/or Tenable.

Knowledge, Skills and Abilities

• Vulnerability Management: Solid understanding of the vulnerability management lifecycle, Common Vulnerabilities and Exposures (CVEs), CVSS scoring, and common attack vectors and vulnerability exploitation.
• AWS Security: Working knowledge of AWS security, including VPC/network, S3, EC2, and container services, and an understanding of common misconfigurations and attack paths in cloud environments.
• Cloud and Infrastructure Scanning: Exposure to enterprise scanner technologies (Tenable) and cloud security/exposure management tools (Wiz).
• Data Analytics & Modeling: Ability to analyze large datasets of vulnerability and infrastructure data using statistical methods, identify trends and anomalies, and translate raw data into clear, actionable reporting.
• Programming & Automation: Proficiency in Python and SQL (including libraries such as pandas) and experience working with REST APIs to collect, transform, and analyze data and to automate routine tasks.
• Interpersonal & Communication Skills: Excellent verbal and written communication skills to build relationships across technical teams and provide clear executive reporting.

How to stand out (Preferred):

• 5 years of relevant experience in vulnerability management, cybersecurity, data science, information technology or a similar field.
• Experience within fintech, payment processing, or another highly-regulated environment.
• Experience administering and maturing the posture of an enterprise scanning platform, particularly Wiz and/or Tenable.
• Understanding of core OS concepts (Windows, Linux), cloud security fundamentals (AWS, Azure, or GCP), and/or enterprise networking.
• Familiarity with payment industry standards and security frameworks (PCI-DSS, NIST Cybersecurity Framework, CIS Benchmarks).
• Experience applying machine learning or predictive modeling techniques (e.g., scikit-learn) to security or operational data.
• Experience with data visualization and BI tools (e.g., Power BI, Tableau, Grafana) and data warehouses or SIEM platforms.
• Experience using ticketing and project tracking tools such as Jira, including automating ticket creation and updates.
• Additional scripting experience (PowerShell, Bash) for automation.

Salary range: $70,000-$110,000

Pay within this range varies by work location and on job-related knowledge, skills, and experience. We look forward to discussing your salary expectations and our full total rewards offerings throughout the interview process.

Please note: North is a US based company and no sponsorship is available for this position at this time.

Who we are: 

North, and our family of companies, are committed to helping entrepreneurs grow their businesses. As an end-to-end payment solutions company, we provide everything business owners need to get paid, whether they serve customers in a physical storefront, online, or both. We pride ourselves on being large enough to offer customized solutions to our enterprise-level clients while remaining agile enough to take an award-winning, hands-on approach to personal service that our merchants won’t find anywhere else.

Let’s go North, together! Our most important resource is our people. Join our diverse team of innovators and do-ers and make your mark on the future of payments technology. We're proud to offer benefits that help our team members further their overall well-being through unique initiatives that are both personally and professionally fulfilling. 

To learn more about North, and our family of companies, visit our website: north.com