The posting
This position is listed on behalf of a partner company, which manages all applications and next steps. Our partner is looking for an Attack Surface Management Service Lead Consultant – Exposure Intelligence Team based in the United States.
This is an exciting opportunity for a cybersecurity professional to shape and establish an enterprise-wide Attack Surface Management (ASM) capability within a growing exposure management function. You will lead efforts to discover, monitor, and govern internet-facing assets, identifying unknown systems, external vulnerabilities, and potential entry points that could expose the organization to cyber threats. By applying Continuous Threat Exposure Management (CTEM) principles, you will transform technical findings into actionable intelligence that prioritizes real-world exploitability and business risk. Working closely with security specialists, asset owners, and cross-functional teams, you will drive remediation strategies that measurably reduce the organization's external attack surface. As the founding subject matter expert in this capability, you will have the opportunity to build scalable processes, strengthen asset governance, and establish performance metrics from the ground up. This remote role is ideal for an analytical and proactive cybersecurity specialist who enjoys solving complex problems, influencing stakeholders, and advancing enterprise security practices.
Accountabilities
- Lead external attack surface discovery and continuous monitoring using External Attack Surface Management (EASM) platforms and vulnerability scanning tools to identify internet-facing assets, vulnerabilities, and potential security exposures.
- Translate external attack surface findings into actionable exposure intelligence, prioritizing remediation based on exploitability, attack paths, and business risk rather than relying solely on traditional vulnerability severity scores.
- Identify potential attack paths originating from internet-facing assets, including exposed services, misconfigured infrastructure, expired or weak certificates, exposed administrative interfaces, and other external weaknesses.
- Establish and maintain asset governance practices, including asset attribution, ownership assignment, inventory reconciliation, and the identification of shadow IT, unmanaged infrastructure, and orphaned assets.
- Expand visibility across third-party environments, subsidiaries, cloud-hosted infrastructure, and other external technology footprints to improve enterprise-wide exposure awareness.
- Partner with asset owners and cybersecurity teams to validate findings, develop clear remediation recommendations, coordinate mitigation activities, and verify that identified exposures have been resolved.
- Collaborate with penetration testing, product security, exposure response, and other security stakeholders to operationalize findings and integrate external attack surface intelligence into broader exposure management practices.
- Build and refine ASM processes, operating procedures, governance frameworks, and performance metrics to establish a sustainable capability from the ground up.
- Improve the quality and reliability of external security findings by validating discovered assets, reducing false positives, and ensuring accurate risk prioritization.
- Track and improve key performance indicators, including external attack surface coverage, the number of unknown or unowned assets, time from exposure discovery to ownership assignment, and time to remediation.
- Communicate technical findings and risk assessments clearly to technical teams and relevant stakeholders, supporting informed decisions and accountability for remediation.
- Continuously evaluate tools, methodologies, and operational practices to improve the organization's ability to identify, prioritize, and reduce exploitable external exposures.
- At least 3 years of professional experience in attack surface management, vulnerability management, security operations, exposure management, or a closely related cybersecurity discipline.
- Strong understanding of internet-facing infrastructure, including Domain Name System (DNS), IP address space, digital certificates, cloud hosting environments, exposed services, and common external security misconfigurations.
- Demonstrated ability to analyze technical security findings, identify potential attack paths, assess exploitability, and translate complex vulnerabilities into business-relevant risks and practical remediation actions.
- Hands-on experience with External Attack Surface Management platforms, such as Censys, and vulnerability scanning solutions, such as Qualys, or comparable tools.
- Knowledge of asset discovery, asset inventory management, configuration management databases (CMDBs), cloud security, network security, and vulnerability management practices.
- Familiarity with cloud provider integrations, third-party risk management, and methods for identifying and governing external assets across complex enterprise environments.
- Understanding of Continuous Threat Exposure Management (CTEM) principles and risk-based approaches to identifying, prioritizing, and mitigating security exposures is an advantage.
- Experience developing cybersecurity processes, operational metrics, and governance practices, particularly in environments where capabilities must be established or scaled from the ground up.
- Strong stakeholder management and collaboration skills, with the ability to build relationships, secure buy-in, and coordinate remediation efforts across teams with different technical responsibilities.
- Excellent analytical, investigative, and problem-solving abilities, supported by a proactive approach to identifying security gaps and improving operational effectiveness.
- Strong written and verbal communication skills, including the ability to explain technical risks and remediation recommendations clearly to both technical and business stakeholders.
- Ability to work independently in a remote environment, manage competing priorities, exercise sound judgment, and adapt to evolving security threats and organizational needs.
- Successful completion of the required background investigation.
- Work authorization: Employment-based visa sponsorship is generally not available for this position.
- Competitive annual salary: $100,000–$170,500, depending on experience, qualifications, and relevant job-related factors.
- Fully remote work: Opportunity to work from home within the United States.
- Technology equipment: Comprehensive home-office technology setup, including a laptop, monitors, headset, keyboard, and mouse.
- Monthly connectivity reimbursement: Financial support to help offset home internet expenses.
- Professional growth: Opportunities to deepen cybersecurity expertise, advance exposure management practices, and influence the development of a new enterprise capability.
- Meaningful impact: The opportunity to strengthen enterprise cybersecurity by identifying external risks, improving remediation outcomes, and reducing the organization's exposure to potential attacks.
- Collaborative environment: Work alongside cybersecurity professionals and cross-functional stakeholders to solve complex security challenges and advance innovative approaches to risk management.
- Inclusive workplace: A commitment to equal employment opportunities and a professional environment that values diverse backgrounds, experiences, and perspectives.
How Jobgether works:
We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.
We appreciate your interest and wish you the best!
Why Apply Through Jobgether?
Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.
#LI-CL1
