Global Lead, Attack Surface Management (f/m/d)
Core
Owns the ASM/EASM/CAASM capability including discovery, attribution, asset ownership, risk prioritization, and cross-functional remediation across internet-facing, internal, cloud, SaaS, subsidiary, and third-party surfaces.
Role type
Senior IC cybersecurity engineer (attack surface management)
Builds
ASM operating model, automated discovery correlation, integration blueprints, and sustainability/governance models for CTEM
Domain
Cybersecurity, Information Security, Life Sciences
Required skills
Attack surface management, exposure management, offensive/recon security, enterprise ASM governance, ASM platforms, reconnaissance tooling, internet fundamentals, API integration, automation scripting
Preferred skills
Digital risk protection, M&A security integration, Python scripting, CISSP, CISM, OSCP, CRTO, GCIH, GIAC, vendor ASM/CAASM certification
Technologies
Cortex Xpanse, Defender EASM, CyCognito, Censys, Shodan, DNS, TLS, TCP/IP, CMDB, APIs
Responsibilities
Architect ASM operating model with outside-in discovery and risk prioritization; Engineer/automate discovery correlation and enrichment across multiple data sources; Design integration blueprints connecting asset visibility to vulnerability and threat intel platforms; Design sustainability and governance models including ownership assignment and remediation SLAs
Seniority
Senior, hands-on IC
