Job Summary
The Systems Engineer will support exposure management and continuous risk reduction initiatives across enterprise environments. The role will focus on attack surface management, vulnerability management, cloud security, identity security, and network fundamentals while supporting the onboarding and operation of an exposure management platform. The engineer will coordinate integrations, validate exposure data and asset visibility, prioritize remediation activities, support CTEM-aligned workflows, and provide governance, reporting, and operational support across security and technology teams.
Key Responsibilities
• Lead technical onboarding and configuration of the exposure management platform.
• Coordinate data source integrations across cloud, identity, infrastructure, vulnerability scanners, and related environments.
• Validate ingestion accuracy, asset correlation, and exposure signal quality across environments.
• Partner with engineering, cloud, IAM, and application teams to ensure successful rollout and operational readiness.
• Assist in defining workflows, reporting structures, and remediation processes aligned with CTEM cycles.
• Document integration steps, system behavior, and operational procedures to support long-term program maturity.
• Discover, map, and inventory external and internal attack surfaces across cloud, network, application, and SaaS environments.
• Identify unknown, shadow, misconfigured, or abandoned assets contributing to organizational exposure.
• Monitor asset changes and maintain continuous visibility into evolving environments.
• Prioritize remediation based on active threats, exploitability, data sensitivity, operational criticality, and compensating controls.
• Align validation and prioritization activities with CTEM cycle objectives.
• Partner with application, infrastructure, cloud, identity, and asset discovery teams to guide remediation plans.
• Track remediation progress and verify full resolution of exposures.
• Identify systemic or recurring issues and recommend long-term improvements.
• Contribute to scoping CTEM cycles and defining focus areas such as cloud posture, identity exposures, and internet-facing risks.
• Maintain standards, processes, and documentation for exposure management activities.
• Provide metrics and reporting to leadership on exposure trends, risk posture changes, and remediation performance.
• Support integration of exposure management activities into broader security architecture and operations.
• Partner with IAM teams to analyze privilege misuse, identity sprawl, and authentication weaknesses.
Required Qualifications
• Strong understanding of attack surface management, vulnerability management, cloud security, identity security, and network fundamentals.
• Experience with CTEM-aligned workflows or continuous risk reduction programs.
• Ability to interpret complex exposure data and translate it into actionable insights.
• Hands-on experience with exposure, vulnerability, or attack surface management tooling, including ASM, CSPM, CIEM, VM scanners, EASM, or attack path analysis tools.
• Knowledge of threat modeling, attacker techniques, and modern exploitation trends.
• Strong communication skills with the ability to interact effectively with technical and non-technical stakeholders.
