Description:
Business Initiative/Purpose: (Goal, Business Impact, Accomplishments from the work)
Lead EASM/BAS validation and engineering: Investigate and reproduce findings from EASM platforms (e.g., exposed services, misconfigurations, weak crypto, DNS issues, leaked assets)
Bachelor Degree: (Required, Preferred or Not Required)
Required or enough job experience.
Role Responsibilities: (what they will be doing)
- The Cybersecurity Engineer (Attack Surface Management) is responsible for designing, implementing, and maturing advanced security validation capabilities to safeguard enterprise systems and applications.
- This role focuses on continuous security validation through External Attack Surface Management (EASM) tools, integration with existing security infrastructure, and providing actionable insights to strengthen the firm s cyber resilience.
- The engineer partners with cross-functional teams to simulate real-world adversarial tactics, techniques, and procedures (TTPs), evaluate control effectiveness, and recommend enhancements that align with enterprise risk management and regulatory standards.
Must Have Skills/Prior Experiences: (Vendor should not submit any candidate that does not have these skills/prior experience.)
- Offsec (Red team, network, web app)
2. Detection Engineering (splunk, CS NG-SIEM, Azure Sentinel)
3. Python (scripting) Experience with Breach and Attack (BAS) or Continuous Security Validation (CSV) tool(s). Hands-on experience with architecting, maturing, and automation - CI/CD pipeline end to end lifecycle. Experience with penetration testing, vulnerability management, and security tools. Proficiency in scripting for automation, data wrangling and enrichment (e.g., Python, PowerShell).
PlNice to Have Skills/Prior Experiences: (Hiring Manager DOES NOT require these skills/ prior experience. However candidates with any of these will be looked at first.)
Optional
- dev/appsec experience
- networking/cloud
- IR/SOC
EEO Mindlance is an Equal Opportunity Employer and does not discriminate in employment on the basis of Minority/Gender/Disability/Religion/LGBTQI/Age/Veterans.
