Attack Surface Management Service Lead Consultant - Exposure Intelligence Team
New
J
JobgetherCybersecurity
Based in the United StatesFull-TimeLead
Salary100,000 - 170,500 USD per year
Apply NowOpens the employer's application page
Job Details
- Experience
- At least 3 years of professional experience in attack surface management, vulnerability management, security operations, exposure management, or a closely related cybersecurity discipline.
Requirements
- Have at least 3 years of professional experience in attack surface management, vulnerability management, security operations, exposure management, or a related cybersecurity discipline.
- Understand internet-facing infrastructure, including DNS, IP address space, digital certificates, cloud hosting environments, exposed services, and common external security misconfigurations.
- Analyze technical security findings, identify potential attack paths, assess exploitability, and translate vulnerabilities into business-relevant risks and remediation actions.
- Have hands-on experience with External Attack Surface Management platforms such as Censys and vulnerability scanning solutions such as Qualys or comparable tools.
- Know asset discovery, asset inventory management, CMDBs, cloud security, network security, and vulnerability management practices.
- Be familiar with cloud provider integrations, third-party risk management, and methods for identifying and governing external assets in complex enterprise environments.
- Understand CTEM principles and risk-based approaches to identifying, prioritizing, and mitigating exposures; this is an advantage.
- Have experience developing cybersecurity processes, operational metrics, and governance practices, particularly when establishing or scaling capabilities.
- Manage stakeholders and coordinate remediation across teams with differing technical responsibilities.
- Demonstrate analytical, investigative, and problem-solving abilities.
- Communicate technical risks and remediation recommendations clearly to technical and business stakeholders.
- Work independently in a remote environment, manage competing priorities, and adapt to evolving security threats and organizational needs.
- Successfully complete the required background investigation.
Responsibilities
- Lead external attack surface discovery and continuous monitoring using EASM platforms and vulnerability scanning tools.
- Translate findings into actionable exposure intelligence, prioritizing remediation by exploitability, attack paths, and business risk.
- Identify attack paths involving exposed services, misconfigured infrastructure, weak or expired certificates, and exposed administrative interfaces.
- Establish asset governance practices, including attribution, ownership assignment, inventory reconciliation, and identification of shadow IT and orphaned assets.
- Expand exposure visibility across third-party environments, subsidiaries, and cloud-hosted infrastructure.
- Partner with asset owners and security teams to validate findings, recommend remediation, coordinate mitigation, and verify resolution.
- Collaborate with penetration testing, product security, and exposure response stakeholders to integrate intelligence into exposure management.
- Build ASM processes, operating procedures, governance frameworks, and performance metrics.
- Track metrics such as attack surface coverage, unknown or unowned assets, and time to ownership assignment and remediation.
- Evaluate tools and operational practices to improve identification, prioritization, and reduction of external exposures.
View Full Description & ApplyYou'll be redirected to the employer's site
