Advanced Security Engineer - Exposure Management

Relativity•Illinois, IL

4d•$104,000 - $156,000

About The Position

The Advanced Security Engineer is a technically deep, hands-on practitioner who strengthens the organization’s Exposure Management capability. The role identifies and contextualizes vulnerabilities, misconfigurations, unmanaged assets, and container and API posture risks across the technology estate. It correlates findings with asset criticality, exploitability, compensating controls, internet exposure, and threat intelligence, then translates them into a prioritized, continuously updated view of the most significant exposures. Working with engineering and department leaders, Governance Risk Intelligence, Product Security Enablement, Adaptive Security, the Purple Team, Threat Detection & Response, and application and service owners, the engineer improves discovery and context coverage, makes residual risk and exposure aging visible, and coordinates reduction campaigns. The role drives prioritization, reporting, and remediation follow-through while leaving risk-acceptance decisions, policy setting, and remediation execution with the accountable teams. The position operates and improves exposure and external attack-surface discovery; analyzes and prioritizes vulnerabilities and misconfigurations; maintains risk visibility for live containers and APIs; incorporates threat intelligence; develops dashboards, reporting, and data pipelines; and coordinates exposure-reduction campaigns and follow-through with owning teams.

Requirements

2–6 years of hands-on experience in vulnerability management, exposure management, attack surface management, cloud security, or a related security engineering discipline.
Hands-on experience with vulnerability scanning, exposure management, or attack surface management platforms and analyzing vulnerabilities, misconfigurations, unmanaged assets, and security posture findings.
Experience prioritizing exposures using exploitability, asset criticality, internet exposure, threat intelligence, compensating controls, and business context rather than severity scores alone.
Working knowledge of enterprise and cloud technologies, including operating systems, networks, containers, APIs, and at least one major cloud platform.
Familiarity with vulnerability and security frameworks and sources such as CVSS, CISA KEV, EPSS, NIST, MITRE ATT&CK, and CIS benchmarks.
Proficiency in at least one scripting or automation language, such as Python, Bash, or PowerShell, used to integrate security data, automate analysis, or improve exposure-management workflows.
Ability to investigate complex exposure data, identify systemic risk patterns, and communicate prioritized findings and recommended actions to technical and non-technical stakeholders.

Nice To Haves

Bachelor’s degree in Computer Science, Cybersecurity, Information Security, or a related field, or equivalent practical experience.
Hands-on experience assessing exposure across multi-cloud or cloud-native environments.
Experience with enterprise vulnerability management, exposure management, attack-surface management, or adjacent platforms.
Familiarity with AI-enabled SecOps, such as ML-based risk prioritization or AI-assisted workflows.
Basic knowledge of common cloud environments such as AWS, Azure, or GCP.
Experience developing dashboards, metrics, or data pipelines.
Experience supporting compliance and audit requirements (SOC 2, ISO 27001, FedRAMP) from a technical control perspective.
Relevant certifications such as CC, SEC+, CySA+, or equivalent.

Responsibilities

Operate and optimize exposure and external attack-surface discovery capabilities to identify internet-facing, unmanaged, shadow, and newly introduced assets.
Reconcile discovery results with authoritative asset inventories and ownership data, investigate coverage gaps, and improve asset attribution.
Develop repeatable workflows and automation to reduce discovery latency and improve coverage, data quality, and visibility.
Analyze vulnerabilities and misconfigurations, correlating findings with exploitability, asset criticality, internet exposure, compensating controls, and threat intelligence.
Design, tune, and document contextual prioritization logic that produces a defensible, risk-ranked exposure backlog.
Perform detailed analysis of high-impact vulnerabilities, zero-days, and material misconfigurations, and communicate their significance to technical and non-technical stakeholders.
Partner with the Purple Team and other security functions to validate prioritization assumptions and improve correlation with confirmed exploitability.
Maintain an inventory and risk view of live containers and APIs, including running-image risk, workload ownership, API posture, and production context.
Correlate build- and deployment-time findings from Adaptive Security with production runtime context.
Identify systemic container and API posture issues and develop prioritized remediation campaigns for application- and service-owning teams.
Integrate internal and external threat intelligence into exposure scoring and prioritization, including active exploitation, adversary behavior, and emerging-vulnerability signals.
Assess changes in the threat landscape for relevance to the organization’s exposed technologies, assets, containers, and APIs.
Produce timely notifications when new intelligence materially changes the likelihood or priority of an existing exposure.
Build and maintain dashboards, reporting, and data pipelines showing residual exposure risk by department, asset class, severity tier, ownership, and age.
Define and monitor measures such as discovery coverage, context coverage, exposure aging, reduction rate, and residual-risk trend; investigate data-quality or performance issues affecting reporting.
Translate complex exposure data into clear findings, trends, and recommended actions for engineering leadership, department leaders, Governance Risk Intelligence, and service-owning teams.
Track high-priority exposures against expected remediation timelines, identify aging and overdue items, and coordinate follow-through with accountable teams.
Plan and run targeted exposure-reduction campaigns, establish measurable outcomes, and report progress, blockers, and residual risk.
Route exposures requiring risk-acceptance guidance to the owning team and Governance Risk Intelligence, and route findings requiring manual review, threat modeling, or adversary validation to the appropriate security function.
Provide technical guidance and prioritization context without taking ownership of risk acceptance, policy decisions, or remediation execution.