Security Analyst II

Security Analyst II We are Lennar Lennar is one of the nation's leading homebuilders, dedicated to making an impact and creating an extraordinary experience for their Homeowners, Communities, and Associates by building quality homes and providing exceptional customer service, giving back to the communities in which we work and live in, and fostering a culture of opportunity and growth for our Associates throughout their career. Lennar has been recognized as a Fortune 500® company and consistently ranked among the top homebuilders in the United States. Join a Company that Empowers you to Build your Future The Security Analyst II will play a key role in the Attack Surface Management (ASM) team, supporting the organization’s risk-first approach to cybersecurity. This position will focus on identifying, prioritizing, and reducing vulnerabilities, proactively hunting threats, and validating defenses through red/purple team exercises. The analyst will collaborate with LTG, SOC/IR, GRC, and business units to deliver measurable risk reduction, improve detection and response capabilities, and support executive reporting. Depending on team needs, the analyst may take lead responsibilities in one or more of the following areas: Vulnerability Management, Threat Hunting, or Red Teaming. A career with purpose. A career built on making dreams come true. A career built on building zero defect homes, cost management, and adherence to schedules. Your Responsibilities on the Team Vulnerability Management Conduct continuous vulnerability scanning (internal and external) using Rapid7 and other tools. Validate findings and prioritize vulnerabilities based on exploitability, business criticality, and external exposure. Track remediation efforts with LTG/system owners and enforce SLA timelines. Generate operational dashboards and executive reports translating technical findings into business risk. Support the development of vulnerability management SOPs, playbooks, and automation integrations. Threat Hunting Conduct hypothesis-driven hunts using CrowdStrike, SIEM data, AD logs, and threat intelligence feeds. Investigate stealthy attacker behaviors such as lateral movement, credential abuse, or persistence. Develop new detection logic in collaboration with SOC/IR to improve defensive coverage. Maintain hunt playbooks, documentation, and lessons learned. Research attacker tactics using MITRE ATT&CK and enrich detection engineering. Share findings with SOC/IR and provide business-impact-focused summaries to leadership. Red Teaming & Purple Teaming Plan and execute adversary emulation exercises aligned with MITRE ATT&CK. Lead purple team exercises in collaboration with SOC/IR to validate detection and response. Conduct controlled penetration testing of internal/external systems with a risk-first approach. Document findings, track remediation with IT, and validate closure. Research emerging adversary techniques and incorporate them into testing scenarios. Translate red team results into business risk language for executives.

Bachelor’s degree in Cybersecurity, Computer Science, or related field (or equivalent experience). 3+ years of experience in one or more of the following: Vulnerability Management, Threat Hunting, Penetration Testing, or Red Teaming. Familiarity with security tools: Rapid7, CrowdStrike, SIEM platforms, and red team/offensive frameworks. Knowledge of frameworks: CVSS, MITRE ATT&CK, threat intelligence feeds (CISA KEV, OTX, etc.). Preferred certifications: OSCP, CRTO, GPEN, CISSP, or equivalent. Physical & Office/Site Presence Requirements: This is primarily a sedentary office position which requires the incumbent to have the ability to operate computer equipment, speak, hear, bend, stoop, reach, lift, and move and carry up to 25 lbs. Finger dexterity is necessary. Additional Requirements Strong technical aptitude and analytical mindset. Excellent problem-solving and investigative skills. Effective communication