Start searching
Back to Jobs
Technology

Cybersecurity/Attack Surface Management Engineer

MindlanceUnited States🇺🇸United States

Why this role stands out

This hybrid role offers a fantastic opportunity to advance your career in cybersecurity by leading cutting-edge attack surface management initiatives and developing innovative security validation capabilities. You'll thrive here if you possess strong offensive security, detection engineering, and Python scripting skills, and are eager to collaborate with diverse teams to enhance enterprise cyber resilience. Apply now to make a significant impact in a dynamic technology environment.

Quick overview

SeniorityMid Senior
Work modeHybrid
LocationUnited States
SplunkAzureDNSPenetration TestingPowerShellPython

Job description

Description:

Business Initiative/Purpose: (Goal, Business Impact, Accomplishments from the work)

Lead EASM/BAS validation and engineering: Investigate and reproduce findings from EASM platforms (e.g., exposed services, misconfigurations, weak crypto, DNS issues, leaked assets)

Bachelor Degree: (Required, Preferred or Not Required)

Required or enough job experience.

Role Responsibilities: (what they will be doing)

  • The Cybersecurity Engineer (Attack Surface Management) is responsible for designing, implementing, and maturing advanced security validation capabilities to safeguard enterprise systems and applications.
  • This role focuses on continuous security validation through External Attack Surface Management (EASM) tools, integration with existing security infrastructure, and providing actionable insights to strengthen the firm s cyber resilience.
  • The engineer partners with cross-functional teams to simulate real-world adversarial tactics, techniques, and procedures (TTPs), evaluate control effectiveness, and recommend enhancements that align with enterprise risk management and regulatory standards.

Must Have Skills/Prior Experiences: (Vendor should not submit any candidate that does not have these skills/prior experience.)

  1. Offsec (Red team, network, web app)
    2. Detection Engineering (splunk, CS NG-SIEM, Azure Sentinel)
    3. Python (scripting) Experience with Breach and Attack (BAS) or Continuous Security Validation (CSV) tool(s). Hands-on experience with architecting, maturing, and automation - CI/CD pipeline end to end lifecycle. Experience with penetration testing, vulnerability management, and security tools. Proficiency in scripting for automation, data wrangling and enrichment (e.g., Python, PowerShell).

PlNice to Have Skills/Prior Experiences: (Hiring Manager DOES NOT require these skills/ prior experience. However candidates with any of these will be looked at first.)

Optional
- dev/appsec experience
- networking/cloud
- IR/SOC

EEO Mindlance is an Equal Opportunity Employer and does not discriminate in employment on the basis of Minority/Gender/Disability/Religion/LGBTQI/Age/Veterans.

Similar jobs

Apply