FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expertise in vulnerability and exposure management, with a strong focus on cloud-native architectures and automation. Proficient in developing risk-based prioritization engines and integrating security practices across diverse environments.
Highest-signal resume keywords
Vulnerability ManagementExposure ManagementCloud-Native ArchitectureInfrastructure-as-CodeSecurity Automation
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
PythonGoJavaTerraformCloudFormationCI/CD PipelinesContainer SecurityKubernetes SecurityRisk ManagementAudit Logging
Soft Skills
CollaborationLeadershipStrategic Thinking
Tools & Technologies
TenableQualysRapid7AWSAzureGCPSCA/SAST ToolingDependency MappingThreat Intelligence FeedsMulti-Agent Systems
Certifications & Qualifications
CISSPOSCPGWAPT
Industry Keywords
SOC2GxPContinuous Threat Exposure ManagementAttack Surface ManagementCVSSEPSSCISA KEVReachability AnalysisAudit TrailsRollback Controls
Tech Stack
Tools & technologiesAWSAzureCloudGoogle Cloud PlatformJavaKubernetesLinuxMacOSPythonTerraformUnixGo
About the role
Key responsibilities & impact- Design and deploy multi-agent systems that take exposures from discovery to closure
- Analyze exposures, map dependencies, generate patches or Infrastructure-as-Code updates, and validate remediation
- Build approval gates, audit trails, and rollback controls for automated changes
- Develop risk-based prioritization engines using reachability, attack paths, business criticality, and live exploit intelligence
- Automate verification to distinguish theoretical flaws from actively exploitable conditions
- Drive the Continuous Threat Exposure Management strategy across products, platforms, cloud and on-premise infrastructure, and corporate applications
- Assess and revamp the exposure and vulnerability management program
- Architect cloud-native discovery, asset-inventory, and remediation workflows
- Integrate remediation workflows with ticketing, CI/CD, and configuration management
- Partner with Engineering and IT to embed secure-by-default practices
- Define KPIs, KCIs, and KRIs to measure control effectiveness and guide improvement
- Support regulatory compliance by designing exposure and vulnerability controls aligned with standards such as SOC2
- Collaborate across the Information Security team and departments to support secure technology services and business objectives
Requirements
What you’ll need- Bachelor's or Master's degree in Computer Science, Information Security, or a related field, or equivalent practical experience
- 7+ years of experience in vulnerability management, exposure management, or related information security domains
- Experience leading large-scale programs from strategy through execution in cloud-first and hybrid environments
- Deep understanding of security principles and vulnerability remediation
- Hands-on experience building or deploying AI/LLM-based agents or multi-agent systems for security or engineering workflows
- Working knowledge of approval workflows, audit logging, rollback controls, and risks of agent-driven changes
- Proficiency in one or more programming languages, such as Python, Go, or Java
- Strong scripting skills for automation and integration
- Expert-level experience with vulnerability and exposure management platforms such as Tenable, Qualys, or Rapid7
- Experience with CTEM, attack surface management, and attack-path analysis tooling
- Knowledge of CVSS, EPSS, CISA KEV, reachability analysis, and threat intelligence feeds
- Experience with AWS, Azure, or GCP
- Experience with container and Kubernetes security
- Experience with Infrastructure-as-Code, including Terraform or CloudFormation
- Experience with CI/CD pipelines, SCA/SAST tooling, software supply chain security, SBOMs, and dependency mapping
- Knowledge of UNIX/Linux, macOS, and Windows operating systems, networking, and database management systems
- Experience with risk management and compliance requirements such as SOC2 or GxP
- Relevant security certifications such as CISSP, OSCP, or GWAPT are highly desirable
Benefits
Comp & perks- Annual bonus
- Equity compensation
- Comprehensive benefits package
- Regular on-site visits for routine work and departmental events
- Accommodations available on request for candidates taking part in all aspects of the selection process