Advanced Security Engineer - Exposure Management
Core
Identifies and contextualizes vulnerabilities, misconfigurations, and unmanaged assets across the technology estate to create a prioritized view of exposures that matter most.
Role type
Senior IC security engineer (exposure management)
Builds
Prioritized exposure backlogs, dashboards, reporting pipelines, and remediation campaigns
Domain
Cybersecurity, Cloud Security, Risk Management
Required skills
Vulnerability management, Exposure management, Attack surface management, Cloud security, Threat intelligence integration, Risk prioritization logic, Scripting/automation (Python/Bash/PowerShell), Asset inventory reconciliation, Container and API posture analysis, Security frameworks (CVSS, NIST, MITRE ATT&CK)
Preferred skills
Multi-cloud environments, AI-enabled SecOps, Compliance support (SOC 2, ISO 27001), Dashboard development
Technologies
Vulnerability scanning platforms, Exposure management platforms, Cloud platforms (AWS/Azure/GCP), Container runtimes, API gateways, Scripting languages (Python, Bash, PowerShell)
Responsibilities
Operate exposure discovery capabilities to identify internet-facing and shadow assets; Analyze vulnerabilities and misconfigurations correlating with exploitability and asset criticality; Maintain inventory and risk view of live containers and APIs; Integrate threat intelligence into exposure scoring; Build dashboards and data pipelines for residual risk visibility; Coordinate exposure reduction campaigns with owning teams
Seniority
Mid-Senior, hands-on IC
