Attack Surface Management Engineer
Core
Lead external attack surface management (EASM) and client validation engineering to investigate and reproduce security findings like exposed services, misconfigurations, and weak cryptography.
Role type
Senior IC security engineer (attack surface management)
Builds
Security validation capabilities and actionable insights for enterprise cyber resilience
Domain
Cybersecurity / Cloud Security
Required skills
Python, Golang, C#, ETL pipelines, SQL, Kusto, Cloud, Cryptography, DevOps
Preferred skills
Application security, Networking, Incident response/SOC
Responsibilities
Lead external attack surface management (EASM) and client validation and engineering, investigating and reproducing findings such as exposed services, misconfigurations, weak cryptography, DNS issues, and leaked assets; Design, implement, and improve security validation capabilities to protect enterprise systems and applications; Use EASM tools for continuous security validation and integrate them with existing security infrastructure; Provide actionable insights to strengthen cyber resilience; Work with cross-functional teams to simulate real-world adversarial tactics, techniques, and procedures and assess security control effectiveness; Recommend improvements aligned with enterprise risk management and regulatory standards
