Attack Surface Management Engineer

Job Description Job Description Title: Attack Surface Management Engineer
Location: Remote
Duration: 12 Months
Description:
Business Initiative/Purpose: (Goal, Business Impact, Accomplishments from the work)
Lead EASM/Client validation and engineering: Investigate and reproduce findings from EASM platforms (e.g., exposed services, misconfigurations, weak crypto, DNS issues, leaked assets)
Bachelor Degree: (Required, Preferred or Not Required)
Required or enough job experience.
Role Responsibilities: (what they will be doing)

• The Cybersecurity Engineer (Attack Surface Management) is responsible for designing, implementing, and maturing advanced security validation capabilities to safeguard enterprise systems and applications.
• This role focuses on continuous security validation through External Attack Surface Management (EASM) tools, integration with existing security infrastructure, and providing actionable insights to strengthen the firm s cyber resilience.
• The engineer partners with cross-functional teams to simulate real-world adversarial tactics, techniques, and procedures (TTPs), evaluate control effectiveness, and recommend enhancements that align with enterprise risk management and regulatory standards.

Must Have Skills/Prior Experiences: (Vendor should not submit any candidate that does not have these skills/prior experience.)
1. Software development(Python, Golang, C# language doesn t matter really)
2. ETL Pipelines
3. Self starter
4. sql/kusto
5. cloud
Plus/Nice to Have Skills/Prior Experiences: (Hiring Manager DOES NOT require these skills/ prior experience. However candidates with any of these will be looked at first.)
Optional
- dev/appsec experience
- networking/cloud
- IR/SOC
EEO
Mindlance is an Equal Opportunity Employer and does not discriminate in employment on the basis of Minority/Gender/Disability/Religion/LGBTQI/Age/Veterans.