Cyber Exposure Management Engineer

Stefanini Group•Dallas, TX

5d•Remote

About The Position

The Exposure Management Engineer is responsible for continuously identifying, assessing, validating, and reducing the organization's cyber exposures across on-premises, cloud, and hybrid environments. This role supports both the long-term Exposure Management (CTEM) program and an initial onboarding phase as the organization integrates a new exposure management platform. During the early stages, the engineer will coordinate tool deployment, onboard business units, normalize data sources, validate integrations, and support solution rollout to ensure accurate visibility and effective operational use. Beyond implementation, the engineer integrates attack surface discovery, vulnerability insights, misconfiguration analysis, identity exposure review, and business context to provide a unified view of cyber risk. The engineer ensures the organization proactively mitigates high-impact exposures before they are exploited.

Requirements

Strong understanding of attack surface management, vulnerability management, cloud security, identity security, and network fundamentals.
Experience with CTEM aligned workflows or continuous risk reduction programs.
Ability to interpret complex exposure data and translate it into actionable insights.
Hands on experience with exposure, vulnerability, or ASM tooling (ASM, CSPM, CIEM, VM scanners, EASM, attack path analysis tools).
Knowledge of threat modeling, attacker techniques, and modern exploitation trends.
Strong communication skills for interacting with technical and non technical stakeholders

Responsibilities

Lead technical onboarding and configuration of the new exposure management platform.
Coordinate data source integrations (cloud, identity, infrastructure, vulnerability scanners, etc.).
Validate ingestion accuracy, asset correlation, and exposure signal quality across environments.
Partner with engineering, cloud, IAM, and application teams to ensure successful rollout and operational readiness.
Assist in defining workflows, reporting structures, and remediation processes that align with CTEM cycles.
Document integration steps, system behavior, and operational procedures to support long term program maturity.
Discover, map, and inventory external and internal attack surfaces across cloud, network, application, and SaaS environments.
Identify unknown, shadow, misconfigured, or abandoned assets contributing to organizational exposure.
Monitor asset changes and ensure continuous visibility into evolving environments.
Prioritize remediation based on active threats, exploitability, data sensitivity, operational criticality, and compensating controls.
Align validation and prioritization activities with CTEM cycle objectives.
Partner with application, infrastructure, cloud, identity, and asset discovery teams to guide remediation plans.
Track remediation progress and verify full resolution of exposures.
Identify systemic or recurring issues and recommend long term improvements.
Contribute to scoping CTEM cycles and defining focus areas (cloud posture, identity exposures, internet facing risks, etc.).
Maintain standards, processes, and documentation for exposure management activities.
Provide clear metrics and reporting to leadership on exposure trends, risk posture changes, and remediation performance.
Support integration of exposure management activities into broader security architecture and operations.
Partner with IAM teams to analyze privilege misuse, identity sprawl, and authentication weaknesses.