Attack Surface Management Service Lead Consultant - Exposure Intelligence Team

Accountabilities: Lead external attack surface discovery and continuous monitoring using External Attack Surface Management (EASM) platforms and vulnerability scanning tools to identify internet-facing assets, vulnerabilities, and potential security exposures. Translate external attack surface findings into actionable exposure intelligence, prioritizing remediation based on exploitability, attack paths, and business risk rather than relying solely on traditional vulnerability severity scores. Identify potential attack paths originating from internet-facing assets, including exposed services, misconfigured infrastructure, expired or weak certificates, exposed administrative interfaces, and other external weaknesses. Establish and maintain asset governance practices, including asset attribution, ownership assignment, inventory reconciliation, and the identification of shadow IT, unmanaged infrastructure, and orphaned assets. Expand visibility across third-party environments, subsidiaries, cloud-hosted infrastructure, and other external technology footprints to improve enterprise-wide exposure awareness. Partner with asset owners and cybersecurity teams to validate findings, develop clear remediation recommendations, coordinate mitigation activities, and verify that identified exposures have been resolved. Collaborate with penetration testing, product security, exposure response, and other security stakeholders to operationalize findings and integrate external attack surface intelligence into broader exposure management practices. Build and refine ASM processes, operating procedures, governance frameworks, and performance metrics to establish a sustainable capability from the ground up. Improve the quality and reliability of external security findings by validating discovered assets, reducing false positives, and ensuring accurate risk prioritization. Track and improve key performance indicators, including external attack surface coverage, the number of unknown or unowned assets, time from exposure discovery to ownership assignment, and time to remediation. Communicate technical findings and risk assessments clearly to technical teams and relevant stakeholders, supporting informed decisions and accountability for remediation. Continuously evaluate tools, methodologies, and operational practices to improve the organization's ability to identify, prioritize, and reduce exploitable external exposures. Requirements At least 3 years of professional experience in attack surface management, vulnerability management, security operations, exposure management, or a closely related cybersecurity discipline. Strong understanding of internet-facing infrastructure, including Domain Name System (DNS), IP address space, digital certificates, cloud hosting environments, exposed services, and common external security misconfigurations. Demonstrated ability to analyze technical security findings, identify potential attack paths, assess exploitability, and translate complex vulnerabilities into business-relevant risks and practical remediation actions. Hands-on experience with External Attack Surface Management platforms, such as Censys, and vulnerability scanning solutions, such as Qualys, or comparable tools. Knowledge of asset discovery, asset inventory management, configuration management databases (CMDBs), cloud security, network security, and vulnerability management practices. Familiarity with cloud provider integrations, third-party risk management, and methods for identifying and governing external assets across complex enterprise environments. Understanding of Continuous Threat Exposure Management (CTEM) principles and risk-based approaches to identifying, prioritizing, and mitigating security exposures is an advantage. Experience developing cybersecurity processes, operational metrics, and governance practices, particularly in environments where capabilities must be established or scaled from the ground up. Strong stakeholder management and collaboration skills, with the ability to build relationships, secure buy-in, and coordinate remediation efforts across teams with different technical responsibilities. Excellent analytical, investigative, and problem-solving abilities, supported by a proactive approach to identifying security gaps and improving operational effectiveness. Strong written and verbal communication skills, including the ability to explain technical risks and remediation recommendations clearly to both technical and business stakeholders. Ability to work independently in a remote environment, manage competing priorities, exercise sound judgment, and adapt to evolving security threats and organizational needs. Successful completion of the required background investigation. Work authorization: Employment-based visa sponsorship is generally not available for this position. Benefits Competitive annual salary: $100,000–$170,500, depending on experience, qualifications, and relevant job-related factors. Fully remote work: Opportunity to work from home within the United States. Technology equipment: Comprehensive home-office technology setup, including a laptop, monitors, headset, keyboard, and mouse. Monthly connectivity reimbursement: Financial support to help offset home internet expenses. Professional growth: Opportunities to deepen cybersecurity expertise, advance exposure management practices, and influence the development of a new enterprise capability. Meaningful impact: The opportunity to strengthen enterprise cybersecurity by identifying external risks, improving remediation outcomes, and reducing the organization's exposure to potential attacks. Collaborative environment: Work alongside cybersecurity professionals and cross-functional stakeholders to solve complex security challenges and advance innovative approaches to risk management. Inclusive workplace: A commitment to equal employment opportunities and a professional environment that values diverse backgrounds, experiences, and perspectives.