Global Lead, Attack Surface Management (f/m/d)
Core
Architect and operationalize the Attack Surface Management (ASM) strategy, driving discovery, attribution, asset ownership, and cross-functional remediation for internet-facing, cloud, and third-party surfaces.
Role type
Senior IC cybersecurity engineer (Attack Surface Management)
Builds
Enterprise ASM operating model, automated discovery correlation, and integration blueprints connecting asset visibility to vulnerability and remediation platforms.
Domain
Cybersecurity, Cloud Security, Internet Infrastructure
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Attack Surface Management (ASM), Exposure Management (EASM), Cloud Security, Internet fundamentals (TCP/IP, DNS, TLS), Asset Discovery, Risk Prioritization, Cross-functional Remediation, API Integration, Scripting (Python)
Preferred skills
Digital Risk Protection, M&A Security Integration, Offensive/Recon Security, Vendor ASM/CAASM Certification
Technologies
Cortex Xpanse, Defender EASM, CyCognito, Censys, Shodan, CMDB
Responsibilities
Architect ASM operating models and workflows; Engineer automation for discovery correlation and enrichment; Design integration blueprints for asset visibility; Design sustainability and governance models for remediation SLAs; Drive independent asset ownership and remediation across teams.
Seniority
Senior, hands-on IC
