Attack Surface Management Engineer

Title: Attack Surface Management Engineer Location: Remote Duration: 12 Months Description Business Initiative/Purpose: (Goal, Business Impact, Accomplishments from the work) Lead EASM/Client validation and engineering: Investigate and reproduce findings from EASM platforms (e.g., exposed services, misconfigurations, weak crypto, DNS issues, leaked assets) Bachelor Degree: (Required, Preferred or Not Required) Required or enough job experience. Role Responsibilities: (what they will be doing) The Cybersecurity Engineer (Attack Surface Management) is responsible for designing, implementing, and maturing advanced security validation capabilities to safeguard enterprise systems and applications. This role focuses on continuous security validation through External Attack Surface Management (EASM) tools, integration with existing security infrastructure, and providing actionable insights to strengthen the firm’s cyber resilience. The engineer partners with cross-functional teams to simulate real-world adversarial tactics, techniques, and procedures (TTPs), evaluate control effectiveness, and recommend enhancements that align with enterprise risk management and regulatory standards. Must Have Skills/Prior Experiences: (Vendor should not submit any candidate that does not have these skills/prior experience.) Software development(Python, Golang, C#... language doesn’t matter really) ⁠ ETL Pipelines ⁠ Self starter ⁠ sql/kusto ⁠ cloud Plus/Nice to Have Skills/Prior Experiences: (Hiring Manager DOES NOT require these skills/ prior experience. However candidates with any of these will be looked at first.) Optional dev/appsec experience networking/cloud IR/SOC EEO “Mindlance is an Equal Opportunity Employer and does not discriminate in employment on the basis of – Minority/Gender/Disability/Religion/LGBTQI/Age/Veterans.”