Senior Analyst, Digital Security

This a Full Remote job, the offer is available from:
United States, Texas (USA)

WM is expanding its security exposure management capability through a dedicated Security Exposure Operations function responsible for turning security findings into consistent, measurable outcomes. The Senior Analyst, Security Exposure Operations will drive security findings from investigation and prioritization through ownership, disposition, and verified resolution.

The role will serve as a senior operational resource within the team, applying risk, criticality, threat context, and business impact to determine appropriate action. The Senior Analyst will partner across Cybersecurity, Information Technology, and the business to resolve complex or significant findings, maintain accountability, improve operational processes, and leverage automation and AI to increase the efficiency and scale of security exposure operations.

• Investigate and prioritize security findings based on criticality, threat intelligence, exploitability, business impact, and existing controls
• Drive findings through ownership, remediation, risk acceptance, exception, or other appropriate disposition to verified closure
• Coordinate with Cybersecurity, IT, application, infrastructure, and business teams to resolve findings and
  ** escalate
  * * significant, overdue, disputed, or unowned issues
• Validate remediation and supporting evidence before findings are closed
• Monitor aging, response targets, backlog health, and recurring exposures to identify systemic issues requiring corrective action
• Establish and continuously improve standards for investigation, prioritization, disposition, escalation, documentation, and closure
• Develop reporting and operational insights on risk, exposure trends, remediation progress, and emerging concerns
• Automate repetitive processes using AI, scripting, and workflow orchestration to improve investigation, routing, tracking, and reporting
• Integrate new exposure sources, security tools, and processes into Security Exposure Operations

• Bachelor's Degree in Computer Science, MIS, Business Administration or similar area of study
• An additional four years of related experience may substitute for the Bachelor’s degree and
• 5 years of previous experience or:
• Certified Information Systems Security Professional (CISSP) within 1 Year and
• Certified Information Systems Auditor (CISA) within 1 Year and
• Certified Information Security Manager (CISM) within 1 Year and

• Strong knowledge of cybersecurity risk and of vulnerability and exposure management principles
• Broad understanding of enterprise technology, including endpoints, servers, networks, cloud, applications, and identity
• Clear, concise written communication that holds up under audit and leadership review
• Ability to influence and drive accountability without direct authority
• Self-directed, with the ability to manage multiple priorities at once

Listed below are key points regarding physical demands, physical and occupational risks, and the work environment of the job. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions of the job.

• Repetitive Motions
• Eye/Hand/Foot Coordination
• Sitting
• Talking
• Hearing

Pay: The expected base pay range for this position across the U.S. is $96,700 - $140,000 . This range represents a good faith estimate for this position. The specific salary offered to a successful candidate may be influenced by a variety of factors including the candidate’s relevant experience, education, training, certifications, qualifications, and work location.

At WM, each eligible employee receives a competitive total compensation package that includes medical, dental, vision, life insurance, and short-term disability. In addition, we offer a stock purchase plan, company matching on a 401(k), and more. Employees also receive paid vacation, holidays, and personal days. Please note that benefits may vary by site.