Security Engineer – Attack Surface Management (ASR)

Who you are

You have a strong background in security engineering, particularly in vulnerability management, with a focus on reducing organizational risk. Your analytical mindset allows you to translate vulnerability data into actionable insights that engineering and IT teams can implement effectively. You thrive in environments where prioritization and pragmatism are essential, and you have experience operating in resource-constrained settings. Relevant security certifications such as Security+, CEH, or CISSP are beneficial, but your practical experience is what truly counts.

You are persistent and pragmatic, always seeking to improve processes and outcomes. Your ability to maintain accurate asset and exposure visibility across various systems, including endpoints, servers, and cloud workloads, sets you apart. You understand the importance of prioritizing remediation based on real-world risk, considering factors like exploitability, asset criticality, and business impact.

What you'll do

In this role, you will own the end-to-end vulnerability lifecycle, which includes discovery, prioritization, remediation tracking, and validation. You will perform regular vulnerability scanning and ad-hoc assessments to identify weaknesses in the system. Your success will be measured by the reduction of exploitable weaknesses and the speed of remediation efforts. You will collaborate closely with engineering and IT teams to ensure that vulnerability findings are integrated into their workflows, enhancing overall security posture.

You will be responsible for maintaining accurate visibility of assets and exposures across various platforms, ensuring that all systems are accounted for and monitored. Your role will involve analyzing vulnerability data and translating it into clear, risk-based prioritized actions that can be executed by the relevant teams. You will also be expected to stay updated on the latest threat intelligence and incorporate this knowledge into your vulnerability management strategies.

What we offer

Exegy provides a dynamic work environment where you can make a significant impact on the security of our systems. You will have the opportunity to work with a team of dedicated professionals who are committed to excellence in security practices. We encourage you to apply even if your experience doesn't match every requirement, as we value diverse perspectives and backgrounds. Join us in our mission to deliver world-class support and managed services to elite financial market participants.