The role focuses on designing and governing enterprise Vulnerability Exposure Management and external attack surface security capabilities, strengthening visibility into internet-facing assets, identifying emerging threats, and driving security risk reduction across complex enterprise environments.
Design and oversee enterprise Vulnerability Exposure Management and external attack surface security programs.
Assess security risks across internet-facing infrastructure, cloud services, DNS, SMTP, TLS certificates, and SaaS environments.
Evaluate threat intelligence, dark web monitoring, and external vulnerability scanning capabilities to identify emerging exposures.
Drive security architecture decisions, risk prioritization, and cross-functional initiatives across enterprise teams.
Establish security standards, communicate risks to executive stakeholders, and leverage enterprise-approved AI tools to improve security operations and decision-making.
8+ years of experience in security architecture, enterprise security, or platform security roles. Proven experience designing or overseeing Vulnerability Exposure Management and external exposure programs.
Strong understanding of internet-facing infrastructure, cloud services, DNS, SMTP, TLS certificates, SaaS exposure, threat actor reconnaissance, exploitation techniques, dark web monitoring, threat intelligence, and external vulnerability scanning.
Knowledge of email security platforms, including Proofpoint, is required.
Demonstrated ability to operate in ambiguous environments, influence cross-functional teams, and communicate complex security concepts to technical and executive audiences.
Associate's degree in Computer Science, Information Security, Engineering, or equivalent practical experience required.
Experience within healthcare or other highly regulated industries.
Hands-on or architectural expertise with Proofpoint, Bright, Xpanse, Tenable, and Splunk or similar SIEM platforms.
Familiarity with HIPAA, NIST, ISO, and SOC compliance frameworks. Experience influencing enterprise security platforms, advising executive stakeholders on risk visibility and prioritization, and mentoring security engineering or architecture teams.
Experience with enterprise-approved AI tools, including GitHub Copilot, Microsoft 365 Copilot, and other GenAI platforms, is expected, with a minimum of 90% weekly usage to support productivity, documentation, analysis, and continuous improvement.
