Attack Surface Management Engineer

Title: Attack Surface Management Engineer
Location: Remote
Duration: 12 Months

Description:
Business Initiative/Purpose: (Goal, Business Impact, Accomplishments from the work)
Lead EASM/Client validation and engineering: Investigate and reproduce findings from EASM platforms (e.g., exposed services, misconfigurations, weak crypto, DNS issues, leaked assets)

Bachelor Degree: (Required, Preferred or Not Required)
Required or enough job experience.

Role Responsibilities: (what they will be doing)

• The Cybersecurity Engineer (Attack Surface Management) is responsible for designing, implementing, and maturing advanced security validation capabilities to safeguard enterprise systems and applications.
• This role focuses on continuous security validation through External Attack Surface Management (EASM) tools, integration with existing security infrastructure, and providing actionable insights to strengthen the firm s cyber resilience.
• The engineer partners with cross-functional teams to simulate real-world adversarial tactics, techniques, and procedures (TTPs), evaluate control effectiveness, and recommend enhancements that align with enterprise risk management and regulatory standards.

Must Have Skills/Prior Experiences: (Vendor should not submit any candidate that does not have these skills/prior experience.)
1. Offsec (Red team, network, web app)
2. Detection Engineering (splunk, CS NG-SIEM, Azure Sentinel)
3. Python (scripting) Experience with Breach and Attack (Client) or Continuous Security Validation (CSV) tool(s). Hands-on experience with architecting, maturing, and automation - CI/CD pipeline end to end lifecycle. Experience with penetration testing, vulnerability management, and security tools. Proficiency in scripting for automation, data wrangling and enrichment (e.g., Python, PowerShell).

Plus/Nice to Have Skills/Prior Experiences: (Hiring Manager DOES NOT require these skills/ prior experience. However candidates with any of these will be looked at first.)
Optional
- dev/appsec experience
- networking/cloud
- IR/SOC


EEO

Mindlance is an Equal Opportunity Employer and does not discriminate in employment on the basis of Minority/Gender/Disability/Religion/LGBTQI/Age/Veterans.