Exposure Management Analyst - Hybrid

Exposure Management Analyst – Hybrid (CIS)

25 Amica Way, Lincoln, RI 02865

Thank you for considering Amica as part of your career journey, where your future is our business.

At Amica, we strive to build a culture of belonging where employees are encouraged to share their unique experience to enrich our workplace, strengthen our company’s mission and broaden our vision of what’s possible. We’ve refocused on creating a workplace that works for all. We’ll continue to provide training, guidance, and resources to make Amica a true place of belonging for all employees.

Want to learn more about our commitment to diversity, equity, and inclusion? Visit our DEI page to read about it!

As a mutual company, our people are our priority. We seek differences of opinion, life experience and perspective to represent the diversity of our policyholders and achieve the best possible outcomes. Our office, located in Lincoln, RI, is seeking an Exposure Management Analyst to join the team!

This role is hybrid, requiring onsite days on our Lincoln, RI corporate campus.

This role does not currently offer employment visa sponsorship.

Our Lincoln, RI office is seeking an Exposure Management Analyst who supports the organization's cybersecurity posture by identifying, analyzing, and helping to remediate cyber exposures across the enterprise. This role contributes to the Continuous Threat Exposure Management (CTEM) lifecycle by integrating vulnerability data, threat intelligence, and business context to reduce risk and improve visibility into the attack surface.

• Perform vulnerability scans and asset discovery across on-prem, cloud, and hybrid environments.
• Collect and correlate data from security tools (e.g., ASM, vulnerability scanners, CMDB).
• Identify misconfigurations, outdated software, and identity-related risks.
• Assist in evaluating exposures based on exploitability, severity, and business impact.
• Apply risk scoring models (e.g., CVSS, EPSS) to support prioritization.
• Collaborate with senior analysts to refine prioritization logic and thresholds.
• Support validation efforts such as penetration testing and attack simulations.
• Document findings and assist in verifying the effectiveness of security controls.
• Coordinate with SOC and IR teams to ensure exposures are detectable and actionable.
• Track remediation status and escale unresolved exposures.
• Work with IT and operations teams to implement fixes and mitigations.
• Maintain dashboards and reports to communicate exposure trends and metrics.
• May be called upon to handle other duties as required.

• Bachelor’s degree in Cybersecurity, Information Systems, or related field or an equivalent combination of education and experience sufficient to successfully perform the essential functions of the job.
• 1+ year of experience in vulnerability management, threat analysis, or IT security.
• Familiarity with CTEM concepts and exposure management workflows.
• Experience with tools such as Threat Intelligence Platforms, Crowd Strike, Tenable, Rapid7, and Cloud Security Platforms.
• Experience working within a collaborative environment of technical and business subject matter experts.
• Strong analytical and communication skills.
• Security+ or equivalent entry-level certification.
• Exposure to MITRE ATT&CK, NIST CSF, or CIS Controls.

• Medical, dental, vision coverage, short- and long-term disability, and life insurance.
• Paid Vacation – you will receive at least 13 vacation days in the first 12 months, amounts could be greater depending on the role. While able to use prior to accrual, vacation time will accrue monthly.
• Holidays - 14 paid holidays observed.
• Sick time - 6 days sick time at hire, 6 additional days sick time at 90 days of employment.
• Generous 401k with company match and immediate vesting. Additionally, annual 3% non-elective employer contribution.
• Annual Success Sharing Plan – Paid to eligible employees if company meets or exceeds combined ratio, growth and/or service goals.
• Generous leave programs, including paid parental bonding leave.
• Student Loan Repayment and Tuition Reimbursement program.
• Generous fitness and wellness reimbursement.
• Employee community…