Cyber Security Engineer – Attack Surface Management (Remote, US Only)
Pay: Up to $100/hour W2 | 6+ Month Assignment (Potential Extension)
About the Role
Join an innovative and forward-thinking security team as a Cyber Security Engineer specializing in Attack Surface Management. In this fully remote position, you will play a critical role in safeguarding enterprise systems and applications through advanced security validation techniques. You’ll leverage cutting-edge External Attack Surface Management (EASM) and Breach and Attack Simulation (BAS) tools, directly shaping the organization’s cyber resilience while collaborating with leading security professionals across the firm.
Responsibilities
- Design, implement, and enhance advanced security validation capabilities to proactively identify and mitigate threats.
- Validate EASM findings and translate results into actionable remediation strategies.
- Develop and automate realistic BAS scenarios and security validation workflows to test and fortify security controls.
- Integrate security validation processes with existing enterprise infrastructure for comprehensive risk mitigation.
- Collaborate with cross-functional teams to simulate real-world adversarial tactics, techniques, and procedures (TTPs).
- Assess and continuously improve security control effectiveness, ensuring alignment with enterprise risk management and regulatory standards.
- Architect, mature, and automate CI/CD pipeline lifecycles to support secure software delivery.
Required Skills and Experience
- Hands-on offensive security background (red teaming, network, web application security).
- Proven experience validating EASM findings and automating security validation workflows.
- Proficiency in Python scripting for automation and data enrichment.
- Familiarity with Breach and Attack Simulation (BAS) or Continuous Security Validation (CSV) tools.
- Detection engineering experience with Splunk, CrowdStrike Next-Gen SIEM, or Microsoft Sentinel.
- Experience architecting, maturing, and automating CI/CD pipelines.
- Strong background in penetration testing, vulnerability management, and security tool integration.
- Must reside within the continental US and be authorized to work without sponsorship.
Preferred Skills
- Advanced experience designing and automating security validation in large-scale enterprise environments.
- In-depth knowledge of regulatory standards and enterprise risk management frameworks.
Benefits
- 100% remote work from anywhere within the continental US.
- Competitive pay up to $100/hour W2.
- Dynamic, high-impact project with potential for long-term extension.
- Collaborate with top cybersecurity experts and gain exposure to the latest security validation technologies.
How to Apply
If you are passionate about continuous security validation, automation, and driving actionable cyber resilience, apply today with your updated resume. Showcase how you validate EASM findings, design realistic BAS scenarios, and translate findings into actionable remediation steps.
Pay: Up to $100/hour W2 | 6+ Month Assignment (Potential Extension)
About the Role
Join an innovative and forward-thinking security team as a Cyber Security Engineer specializing in Attack Surface Management. In this fully remote position, you will play a critical role in safeguarding enterprise systems and applications through advanced security validation techniques. You’ll leverage cutting-edge External Attack Surface Management (EASM) and Breach and Attack Simulation (BAS) tools, directly shaping the organization’s cyber resilience while collaborating with leading security professionals across the firm.
Responsibilities
- Design, implement, and enhance advanced security validation capabilities to proactively identify and mitigate threats.
- Validate EASM findings and translate results into actionable remediation strategies.
- Develop and automate realistic BAS scenarios and security validation workflows to test and fortify security controls.
- Integrate security validation processes with existing enterprise infrastructure for comprehensive risk mitigation.
- Collaborate with cross-functional teams to simulate real-world adversarial tactics, techniques, and procedures (TTPs).
- Assess and continuously improve security control effectiveness, ensuring alignment with enterprise risk management and regulatory standards.
- Architect, mature, and automate CI/CD pipeline lifecycles to support secure software delivery.
Required Skills and Experience
- Hands-on offensive security background (red teaming, network, web application security).
- Proven experience validating EASM findings and automating security validation workflows.
- Proficiency in Python scripting for automation and data enrichment.
- Familiarity with Breach and Attack Simulation (BAS) or Continuous Security Validation (CSV) tools.
- Detection engineering experience with Splunk, CrowdStrike Next-Gen SIEM, or Microsoft Sentinel.
- Experience architecting, maturing, and automating CI/CD pipelines.
- Strong background in penetration testing, vulnerability management, and security tool integration.
- Must reside within the continental US and be authorized to work without sponsorship.
Preferred Skills
- Advanced experience designing and automating security validation in large-scale enterprise environments.
- In-depth knowledge of regulatory standards and enterprise risk management frameworks.
Benefits
- 100% remote work from anywhere within the continental US.
- Competitive pay up to $100/hour W2.
- Dynamic, high-impact project with potential for long-term extension.
- Collaborate with top cybersecurity experts and gain exposure to the latest security validation technologies.
How to Apply
If you are passionate about continuous security validation, automation, and driving actionable cyber resilience, apply today with your updated resume. Showcase how you validate EASM findings, design realistic BAS scenarios, and translate findings into actionable remediation steps.