Senior Exposure Management Engineer – Mid-Atlantic region

GuidePoint Security

. Operate and maintain vulnerability management, RBVM, CAASM, and CNAPP platforms .

Posted 11/12/2026full-timeRemote • United StatesSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive experience in vulnerability management, including exposure management and risk-based prioritization, while effectively collaborating with engineering teams to optimize security workflows and automate processes. Proficient in utilizing various vulnerability management platforms and scripting languages to enhance operational efficiency and reporting.

Highest-signal resume keywords

Cybersecurity Engineering ExperienceRisk-Based Vulnerability ManagementVulnerability Scanning ProgramsScripting in Python or PowerShellExposure Management Platforms

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Vulnerability ManagementExposure ManagementRisk-Based PrioritizationAuthenticated ScanningScan SchedulingFalse-Positive ValidationRemediation TrackingAsset Inventory ManagementCIS and DISA STIG ComplianceAPI Automation

Soft Skills

Strong Communication SkillsCollaboration with Engineering Teams

Tools & Technologies

TenableQualysRapid7WizAxoniusServiceNowJiraREST APIRBVM PlatformsAutomation Workflows

Industry Keywords

NISTPCI DSSCIS ControlsCloud Posture MonitoringSecurity MonitoringIdentity and Access Control

Tech Stack

Tools & technologies

CloudCyber SecurityPythonServiceNow

About the role

Key responsibilities & impact

Operate and maintain vulnerability management, RBVM, CAASM, and CNAPP platforms
Monitor security findings and support prioritization and remediation workflows
Tune platforms, optimize configurations, and integrate tools with client environments
Onboard assets, applications, and cloud environments into security platforms
Review exposure findings and track remediation
Manage remediation workflows with client engineering teams
Generate operational dashboards and security leadership reports
Maintain asset inventory coverage and scanning accuracy
Deploy, configure, and maintain vulnerability scanners across on-premises, cloud, and hybrid environments
Design scan sites, asset groups, templates, and schedules
Manage authenticated scanning, scan engines, and agent deployments; troubleshoot credential failures and coverage gaps
Execute and validate network, host, and web application vulnerability scans; verify findings and reduce false positives
Manage vulnerability discovery, validation, assignment, remediation, re-scan verification, and closure
Coordinate patch and configuration remediation and track risk acceptances, exceptions, and compensating controls
Perform CIS and DISA STIG configuration and compliance scanning
Maintain vulnerability management policies, SLAs, and procedures aligned with NIST, PCI DSS, and CIS Controls
Produce vulnerability metrics and reports, including aging vulnerabilities, mean time to remediate, and scan coverage
Configure RBVM prioritization based on business impact, exposure, and exploitability
Consolidate and de-duplicate findings from multiple scanners into RBVM platforms
Maintain asset criticality ratings and business-context tags
Enrich findings with threat intelligence and exploitability signals
Build queries, dynamic views, automation workflows, dashboards, and SLA escalation rules
Automate ticketing and remediation actions through ServiceNow, Jira, Axonius Query Language, REST API, and Enforcement Center
Support CNAPP operation, cloud posture monitoring, exposure analysis, and investigation of cloud misconfigurations, identity exposures, and attack paths
Develop scripts and automation to improve security workflows
Participate in client operational cadence meetings and provide updates on findings and remediation progress
Assist senior engineers with troubleshooting platform issues
Contribute to documentation and operational playbooks

Requirements

What you’ll need

7+ years of experience in cybersecurity engineering
Experience with exposure management or risk-based vulnerability management
Experience building and maintaining unified asset inventories from disparate security and IT data sources
Experience configuring asset criticality, ownership, and business context for risk-based prioritization
Familiarity with vulnerability management, exposure management, or CNAPP platforms such as Tenable, Qualys, Rapid7, Wiz, Axonius, or similar tools
Hands-on experience running enterprise vulnerability scanning programs, including authenticated scanning, scan scheduling, false-positive validation, and remediation tracking
Scripting experience in Python, PowerShell, or similar
Experience working with APIs or automating workflows
Understanding of vulnerabilities, misconfigurations, identity and access control, and security monitoring
Strong communication skills and ability to work with engineering teams
Ability to embrace emerging technologies, including AI tools
Applicants must be authorized to work for any employer in the U.S.; employment visa sponsorship is unavailable
Up to 10% travel
Sedentary work
Substantial movement of the wrists, hands, and/or fingers for a minimum of 8 hours a day
Close visual acuity for computer terminal viewing and/or extensive reading for a minimum of 8 hours a day

Benefits

Comp & perks

Remote workforce primarily (U.S. based only)
Group Medical Insurance options, including Zero Deductible PPO and High Deductible Health Plan with HSA
GuidePoint pays 90% of employee PPO premiums and 70% of family PPO premiums
GuidePoint pays 100% of employee HDHP premiums and 75% of family HDHP premiums
HSA contributions of $850 annually for employees or $1,750 annually for families
Group Dental Insurance; GuidePoint pays 100% of employee premiums and 75% of family premiums
12 corporate holidays
Flexible Time Off (FTO) program
Healthy mobile phone and home internet allowance
Eligibility for retirement plan after 2 months at open enrollment
Pet Benefit Option
Collaboration, mentorship, and guidance opportunities