Senior Security Engineer (Attack Surface Identification)
Core
Proactively identify and mitigate security threats by continuously discovering exposed IT interfaces and digital footprints to minimize attack surface exposure.
Role type
Senior Security Engineer (Attack Surface Management)
Builds
Automated Attack Surface Management (ASM) tools and processes for a global e-commerce platform
Domain
Cybersecurity / E-commerce
Deliverable
production ML models | product features | infrastructure
Required skills
Attack surface management, shadow IT discovery, vulnerability assessment, scanner/script development, AWS automation with Python, network protocol security, cloud architecture security, attack path analysis
Preferred skills
Cloud security expertise, bug bounty participation, penetration testing, incident response, threat hunting, security architecture review, cybersecurity intelligence
Technologies
AWS, Azure, GCP, Python, ASM solutions
Responsibilities
Continuously monitor and map exposed IT assets (domains, IPs, open ports, cloud environments); proactively identify shadow IT and blind spots; assess and prioritize vulnerabilities based on business impact; collaborate with infrastructure and development teams to remediate risks; build and operate commercial and custom ASM solutions; automate attack surface identification processes
Seniority
Senior, hands-on IC
