Attack Surface Management Expert (Hybrid/Remote)

Allianz Seguros; Barcelona; Hybrid; EUR 60,000 - 90,000; Full time

Benefits offered by this job

Hybrid work model

Company bonus scheme

Employee shares program

Job summary

Allianz Group is seeking a hands-on Attack Surface Management (ASM) Expert to identify assets, detect vulnerabilities, and reduce risk exposure across Allianz’s global environment. You will collaborate with IT, security operations, and architecture teams to maintain visibility and strengthen preventive cyber defense.

The role emphasizes asset discovery, risk prioritization based on exploitability, and partnering with application owners to ensure timely remediation.

Qualifications

• Bachelor's degree in Information Security, CS, or related field.
• Hands-on ASM focusing on external asset discovery and risk reduction.
• Solid DNS/SSL/TLS and cloud infra knowledge (AWS/Azure/GCP).
• Strong ability to document findings and articulate risk to stakeholders.
• Interest in GenAI as a value-add for security workflows.

Responsibilities

• Identify and map Allianz’s external assets continuously.
• Analyze ASM findings with threat intel and prioritize exposures.
• Validate risks and support remediation with IT, DevOps and owners.
• Detect misconfigurations and shadow IT and drive follow-up actions.
• Maintain documentation and support dashboards and KPIs.
• Advocate secure deployment practices across IT and development teams.

Skills

ASM expertise

Threat intel

Cloud infra

Collaboration

Education

Information Security degree

Tools

CyCognito

Cortex Xpanse

Rapid7

Job description

Allianz Group is seeking a hands-on Attack Surface Management (ASM) Expert to identify assets, detect vulnerabilities, and reduce risk exposure across Allianz’s global environment. You will collaborate with IT, security operations, and architecture teams to maintain visibility and strengthen preventive cyber defense.

The role emphasizes asset discovery, risk prioritization based on exploitability, and partnering with application owners to ensure timely remediation.