Cyber Security Engineer - Attack Surface Management

• Current Openings
• Veterans Program
• Working With Indotronix
• Referral Program

All current openings

Cyber Security Engineer - Attack Surface Management

• Location: Charlotte, North Carolina 28208
• Work model: On-site
• Posted 4 days ago
• Job ID: JPC - 211369

Easy ApplyApply Now

Job Description

Cyber Security Engineer - Attack Surface Management (Remote, US Only)

Pay: Up to $100/hour W2 | 6+ Month Assignment (Potential Extension)

About the Role

Join an innovative and forward-thinking security team as a Cyber Security Engineer specializing in Attack Surface Management. In this fully remote position, you will play a critical role in safeguarding enterprise systems and applications through advanced security validation techniques. You'll leverage cutting-edge External Attack Surface Management (EASM) and Breach and Attack Simulation (BAS) tools, directly shaping the organization's cyber resilience while collaborating with leading security professionals across the firm.

Responsibilities

• Design, implement, and enhance advanced security validation capabilities to proactively identify and mitigate threats.
• Validate EASM findings and translate results into actionable remediation strategies.
• Develop and automate realistic BAS scenarios and security validation workflows to test and fortify security controls.
• Integrate security validation processes with existing enterprise infrastructure for comprehensive risk mitigation.
• Collaborate with cross-functional teams to simulate real-world adversarial tactics, techniques, and procedures (TTPs).
• Assess and continuously improve security control effectiveness, ensuring alignment with enterprise risk management and regulatory standards.
• Architect, mature, and automate CI/CD pipeline lifecycles to support secure software delivery.

Required Skills and Experience

• Hands-on offensive security background (red teaming, network, web application security).
• Proven experience validating EASM findings and automating security validation workflows.
• Proficiency in Python scripting for automation and data enrichment.
• Familiarity with Breach and Attack Simulation (BAS) or Continuous Security Validation (CSV) tools.
• Detection engineering experience with Splunk, CrowdStrike Next-Gen SIEM, or Microsoft Sentinel.
• Experience architecting, maturing, and automating CI/CD pipelines.
• Strong background in penetration testing, vulnerability management, and security tool integration.
• Must reside within the continental US and be authorized to work without sponsorship.

Preferred Skills

• Advanced experience designing and automating security validation in large-scale enterprise environments.
• In-depth knowledge of regulatory standards and enterprise risk management frameworks.

Benefits

• 100% remote work from anywhere within the continental US.
• Competitive pay up to $100/hour W2.
• Dynamic, high-impact project with potential for long-term extension.
• Collaborate with top cybersecurity experts and gain exposure to the latest security validation technologies.

How to Apply

If you are passionate about continuous security validation, automation, and driving actionable cyber resilience, apply today with your updated resume. Showcase how you validate EASM findings, design realistic BAS scenarios, and translate findings into actionable remediation steps.

Easy ApplyApply Now

Interested in this role?

Easy ApplyApply Now

Job details

Job ID JPC - 211369

Location Charlotte, North Carolina, United States

Work Model On-site

Job Type Referral Fee

Posted October 15, 2026

Skills Location: Remote - Must be within the continental US to be consideredLength: 6+ month Assignment with potential for extensionPay to Candidate: Up to $100/hour W2 Referral Fee: $4/hour - Not NegotiableMust Have: Please focus on candidates who can design realistic BAS scenarios translate results into actionable remediation and automate security validation workflowsFull Details:The Cybersecurity Engineer for Attack Surface Management is responsible for designing implementing and maturing security validation capabilities to safeguard enterprise systems and applications This role focuses on continuous security validation through External Attack Surface Management (EASM) tools integration with existing security infrastructure and providing actionable insights to strengthen the firm's cyber resilience The engineer partners with cross-functional teams to simulate real-world adversarial tactics techniques and procedures (TTPs) evaluate control effectiveness and recommend enhancements aligned with enterprise risk management and regulatory standards Key Responsibilities:• Design implement and mature advanced security validation capabilities• Utilize External Attack Surface Management (EASM) tools for continuous security validation• Integrate security validation with existing infrastructure to provide actionable insights• Partner with techniques and procedures (TTPs)• Evaluate security control effectiveness and recommend enhancements• Ensure alignment with enterprise risk management and regulatory standards• Architect mature and automate CI/CD pipeline lifecycles Technical Skills:• Offensive security experience (red teaming network web application)• Detection engineering experience with tools such as Splunk CrowdStrike Next-Gen SIEM or Microsoft Sentinel• Proficiency in Python scripting for automation data wrangling and enrichment• Experience with Breach and Attack Simulation (BAS) or Continuous Security Validation (CSV) tools• Hands-on experience with architecting maturing and automating CI/CD pipelines• Experience with penetration testing vulnerability management and security tools

Share this job

*