15 attack surface management jobs at 14 companies in United States

2mo
Save
Mark Applied
Hide
Attack Surface Management Engineer
Elmsford, New York, United States
$112k-$140k/yr OnsiteFull Time
Montefiore Medical Center
Montefiore Medical Center: Academic medical center providing healthcare and clinical research services
4+ YOEBachelor's degree or equivalent; 4-6 years cybersecurity/IT experience in vulnerability management/ASM; regulated healthcare environment preferred.
Asset discovery tools, Vulnerability management tools, CMDB, Cloud inventories
3mo
Save
Mark Applied
Hide
External Attack Surface Management (EASM) Analyst (MD, Baltimore)
Baltimore, Maryland, United States
OnsiteFull Time
CyberLinx Solutions
CyberLinx Solutions: Provides specialized cybersecurity and IT services to federal agencies.
Experience in external attack surface discovery, vulnerability identification, risk scoring, and collaboration with IT/security teams.
1mo
Save
Mark Applied
Hide
Attack Surface Management Consulting Director
Chicago, Illinois, United States
$97k-$189k/yr HybridFull Time
CNA
CNANYSE: CNA: Provides commercial property and casualty insurance and risk management.
10+ YOE10+ years in information security/application security or related fields; deep knowledge of vulnerability management, ethical hacking, AI/ML/LLM security; experience defining strategy, automating processes, and governing secure AI adoption.
AI/ML, GenAI, LLM
1mo
Save
Mark Applied
Hide
Senior 2 Attack Surface Analyst (Hybrid - Seattle)
Seattle, Washington, United States
$166k-$258k/yr HybridFull Time
Nordstrom
Nordstrom: Operates luxury department stores and off-price retail outlets.
6+ YOE6+ years in security operations, vulnerability management, or offensive security; deep knowledge of MITRE ATT&CK, multi-cloud security, IT architecture, offensive security, networking, and scripting (Python, PowerShell). Bachelor's/Master's in IT/CS/Cybersecurity preferred.
MITRE ATT&CK, Python, PowerShell
1w
Save
Mark Applied
Hide
Senior Manager, Attack Engineering
United States
$235k-$280k/yr RemoteFull Time
Horizon3.ai
Horizon3.ai: Autonomous penetration testing platform for continuous security assessment.
5+ Mgmt5+ years leading offensive security or attack engineering teams; experience managing 6–10+ engineers; deep external attack surface expertise; strong software engineering skills (Python); CI/CD and IaC familiarity.
Python, Terraform, CloudFormation, Git, NodeZero
1mo
Save
Mark Applied
Hide
CMDB and Attack Surface Management Support - ServiceNow Developer
McLean, Virginia, United States
$78k-$176k/yr OnsiteFull Time
Booz Allen Hamilton
Booz Allen HamiltonNYSE: BAH: Consulting and technology services for government and commercial clients
3+ YOE3+ years ServiceNow development and CMDB experience, 2+ years Discovery, Analytics, and Service Catalog work; REST/JSON/GraphQL, ITIL/CSDM knowledge, Bachelor's in Information Systems/IT; U.S. citizenship required.
ServiceNow, ServiceNow Discovery, Platform Analytics, Performance Analytics, Service Catalog, SRM, ITSM, Jira, REST, JSON, GraphQL, ServiceNow Flow Designer, GlideAjax, scripted REST APIs, Service Graph Connectors, Integration Hub, ServiceNow SPM, Identification and Reconciliation Engine (IRE), Common Service Data Model (CSDM), ITIL
1mo
Save
Mark Applied
Hide
CMDB and Attack Surface Management Support - ServiceNow Developer
McLean, Virginia, United States
$78k-$176k/yr OnsiteFull Time
Booz Allen Hamilton
Booz Allen HamiltonNYSE: BAH: Provides technology and management consulting services to diverse organizations.
3+ YOE3+ years ServiceNow development including CMDB functions, 2+ years Discovery and Performance/Platform Analytics experience, Service Catalog and workflow development, REST/JSON/GraphQL experience, ITIL/CSDM knowledge, Bachelor's in Information Systems/IT; U.S. citizenship required.
ServiceNow, Platform Analytics, Performance Analytics, Service Catalog, Discovery, SRM, ITSM, Jira, REST, JSON, GraphQL, Common Service Data Model (CSDM), ServiceNow Flow Designer, GlideAjax, Scripted REST APIs, Service Graph Connectors, Integration Hub, Identification and Reconciliation Engine (IRE), CI Class Manager, ServiceNow Vulnerability Response, ServiceNow SPM
1w
Save
Mark Applied
Hide
Senior Staff Information Security Engineer – AI & Attack Surface Management
Santa Clara, California, United States
$152k-$245k/yr OnsiteFull Time
Palo Alto Networks
Palo Alto NetworksNASDAQ: PANW: Provides enterprise-grade network, cloud, and endpoint security software.
8+ YOE8+ years in software/security/platform engineering with experience building AI-powered, cloud-native, scalable security platforms, automation, and ASM capabilities; strong software skills and cloud/Kubernetes/IaC/CI-CD experience.
Python, Go, Java, Kubernetes, Linux, Windows, Infrastructure-as-Code, CI/CD, Cortex XSIAM, Cortex ASM/Xpanse, Tenable, Nexpose, AWS, Azure, GCP
22h
Save
Mark Applied
Hide
Exposure Management Analyst
Birmingham or Atlanta
OnsiteFull Time
Southern Nuclear
Southern Nuclear: Operates nuclear energy plants to generate carbon-free power.
5+ YOE5+ years IT/security experience; experience with vulnerability/patch management, attack surface/cloud posture tools, PowerBI and SIEM, strong communication and stakeholder engagement.
PowerBI, Microsoft Excel, SIEM
2d
Save
Mark Applied
Hide
Senior Security Manager - Vulnerability Management
New York City or Salt Lake City or Chicago
HybridFull Time
Alter Domus
Alter Domus: Provides administrative and accounting services for alternative investment funds.
10+ YOE5+ Mgmt10+ years information security experience with 5+ years leading vulnerability or attack-surface management; hands-on VM platform administration, SOC 2/compliance experience, AWS/Azure and Windows/Linux familiarity, strong communication.
AWS, Azure, CIS Benchmarks, CVE, CVSS, SOC 2, ISO 27001, NIST CSF, OWASP Top 10 for LLM Applications, LinkedIn Learning
2w
Save
Mark Applied
Hide
Global Cybersecurity Senior Manager
Atlanta, Georgia, United States
$144k-$176k/yr OnsiteFull Time
Boston Consulting Group
Boston Consulting Group: Global management consulting firm specializing in business strategy and transformation.
8+ YOE8+ years in cybersecurity with 3+ years in attack surface or vulnerability/exposure management; hands-on with Tenable, Wiz, Microsoft Defender for Endpoint; proven team leadership; strong executive communication and risk prioritization skills.
Tenable, Wiz, Microsoft Defender for Endpoint, ServiceNow, Jira, Entra ID, Okta, AWS IAM, CVSS, EPSS
1mo
Save
Mark Applied
Hide
Senior Security Engineer
United States or Auburn or Georgia
$122k-$130k/yr RemoteFull Time
Fullsteam
Fullsteam: Provides vertical business management software with integrated payment processing.
8+ YOE8+ years IT/security experience with 2–4+ years in vulnerability/attack surface management, CISSP or equivalent, Bachelor's in cybersecurity or equivalent experience, hands-on use of vulnerability tools and appsec testing, scripting, and AI-assisted security workflows.
Wiz, Snyk, Qualys, Nessus, Microsoft Defender, CVSS, EPSS, SAST, DAST, IAST, Burp Suite, Postman, GitHub, MCP
1mo
Save
Mark Applied
Hide
Senior Staff Security Analyst
United States or Nashville or Des Moines or San Jose
RemoteFull Time
OpenLoop
OpenLoop: Provides white-label infrastructure and clinical support for virtual care.
10+ YOE10–12 years in security operations with deep hands-on experience in digital forensics, incident response, vulnerability and attack surface management, threat hunting, detection engineering, scripting (Python/PowerShell), SIEM/EDR, and practical AI tool usage.
Claude, ChatGPT, GitHub Copilot, Python, PowerShell, SIEM, EDR, MITRE ATT&CK, LLM APIs
1mo
Save
Mark Applied
Hide
Sr. Cybersecurity Architect
Windsor Mill, Maryland, United States
$140k-$160k/yr RemoteFull Time
RELI Group
RELI Group: Provides IT and management consulting services to federal agencies.
7+ YOEBachelor's in a related field required; 7+ years cybersecurity experience, 5+ supporting federal security programs; expertise in Zero Trust, NIST RMF/CSF, attack surface management, SQL and scripting (Python/PowerShell/Bash); industry cert (e.g., CISSP, CISM, CCSP).
SQL, Python, Microsoft PowerShell, Bash, Tableau, SDL
1mo
Save
Mark Applied
Hide
Global IT Security Engineer (Denver, PA, US, 17517)
Denver or Valley Forge or Wyomissing
HybridFull Time
UGI Corporation
UGI CorporationNYSE: UGI: Distributes and markets natural gas, propane, and electric power.
4+ YOEMinimum 4 years information security experience; bachelor’s degree preferred. Experience with attack surface management, vulnerability management (InsightVM/Nexpose), penetration testing, cloud security posture, Active Directory, Linux/Windows, and scripting (PowerShell/Python/Bash). Relevant certifications (CISSP, CISM, CEH, Security+) highly desi...
Attack Surface Management (ASM), InsightVM, Nexpose, Metasploit, Burp Suite, Nmap, Wireshark, Linux, Microsoft Windows, Active Directory, RSA, PAM, PowerShell, Python, Bash, PTES, MITRE ATT&CK, OWASP Top Ten, PCI DSS, SOX, ISO/IEC 27001, NIST, CIS Critical Security Controls, SAST, DAST, Cloud Security Posture Management (CSPM), Microsoft Word, Microsoft Excel, Microsoft PowerPoint, Microsoft Visio