The role focuses on designing and governing enterprise Vulnerability Exposure Management and external attack surface security capabilities, strengthening visibility into internet-facing assets, identifying emerging threats, and driving security risk reduction across complex enterprise environments.
-
Design and oversee enterprise Vulnerability Exposure Management and external attack surface security programs.
-
Assess security risks across internet-facing infrastructure, cloud services, DNS, SMTP, TLS certificates, and SaaS environments.
-
Evaluate threat intelligence, dark web monitoring, and external vulnerability scanning capabilities to identify emerging exposures.
-
Drive security architecture decisions, risk prioritization, and cross-functional initiatives across enterprise teams.
-
Establish security standards, communicate risks to executive stakeholders, and leverage enterprise-approved AI tools to improve security operations and decision-making.
-
8+ years of experience in security architecture, enterprise security, or platform security roles. Proven experience designing or overseeing Vulnerability Exposure Management and external exposure programs.
-
Strong understanding of internet-facing infrastructure, cloud services, DNS, SMTP, TLS certificates, SaaS exposure, threat actor reconnaissance, exploitation techniques, dark web monitoring, threat intelligence, and external vulnerability scanning.
-
Knowledge of email security platforms, including Proofpoint, is required.
-
Demonstrated ability to operate in ambiguous environments, influence cross-functional teams, and communicate complex security concepts to technical and executive audiences.
-
Associate's degree in Computer Science, Information Security, Engineering, or equivalent practical experience required.
-
Experience within healthcare or other highly regulated industries.
-
Hands-on or architectural expertise with Proofpoint, Bright, Xpanse, Tenable, and Splunk or similar SIEM platforms.
-
Familiarity with HIPAA, NIST, ISO, and SOC compliance frameworks. Experience influencing enterprise security platforms, advising executive stakeholders on risk visibility and prioritization, and mentoring security engineering or architecture teams.
-
Experience with enterprise-approved AI tools, including GitHub Copilot, Microsoft 365 Copilot, and other GenAI platforms, is expected, with a minimum of 90% weekly usage to support productivity, documentation, analysis, and continuous improvement.
