Attack Surface Management Engineer

Title: Attack Surface Management Engineer
Location: Remote
Duration: 12 Months

Description:
Business Initiative/Purpose: (Goal, Business Impact, Accomplishments from the work)
Lead EASM/Client validation and engineering: Investigate and reproduce findings from EASM platforms (e.g., exposed services, misconfigurations, weak crypto, DNS issues, leaked assets)

Bachelor Degree: (Required, Preferred or Not Required)
Required or enough job experience.

Role Responsibilities: (what they will be doing)

• The Cybersecurity Engineer (Attack Surface Management) is responsible for designing, implementing, and maturing advanced security validation capabilities to safeguard enterprise systems and applications.
• This role focuses on continuous security validation through External Attack Surface Management (EASM) tools, integration with existing security infrastructure, and providing actionable insights to strengthen the firm s cyber resilience.
• The engineer partners with cross-functional teams to simulate real-world adversarial tactics, techniques, and procedures (TTPs), evaluate control effectiveness, and recommend enhancements that align with enterprise risk management and regulatory standards.

Must Have Skills/Prior Experiences: (Vendor should not submit any candidate that does not have these skills/prior experience.)
1. Software development(Python, Golang, C#... language doesn t matter really)
2. ` ETL Pipelines
3. ` Self starter
4. ` sql/kusto
5. ` cloud

Plus/Nice to Have Skills/Prior Experiences: (Hiring Manager DOES NOT require these skills/ prior experience. However candidates with any of these will be looked at first.)
Optional
- dev/appsec experience
- networking/cloud
- IR/SOC

EEO

Mindlance is an Equal Opportunity Employer and does not discriminate in employment on the basis of Minority/Gender/Disability/Religion/LGBTQI/Age/Veterans.