CTEM Lead: Attack Surface & Threat Exposure

Barclays UK; Knutsford; On-site; GBP 80,000 - 100,000; Full time

Job summary

A leading financial institution in the UK is seeking a Continuous Threat Exposure Management (CTEM) Lead to drive its enterprise-wide CTEM strategy. The role involves identifying, prioritizing, and mitigating cyber threats across various environments. The ideal candidate will have experience in cybersecurity, strong leadership skills, and familiarity with technologies like CSPM, SSPM, and BAS. This position is crucial to enhance security measures and protect the organization's assets.

Qualifications

• Experience in cybersecurity with direct exposure to vulnerability management, red teaming, or threat exposure reduction.
• Track record leading programs integrating CSPM, SSPM, ASM, BAS.
• Strong understanding of attack paths and continuous validation.

Responsibilities

• Own and drive the global CTEM strategy aligned with security principles.
• Lead a high-performing CTEM team fostering collaboration and technical excellence.
• Integrate and oversee key exposure management technologies.
• Correlate assets and configuration to identify exploitable attack paths.
• Collaborate with security teams for remediation of exposures.

Skills

Cybersecurity expertise

Vulnerability management

Red teaming

Threat exposure reduction

Education

Advanced degree or certifications (CISSP, OSCP)

Tools

Cloud Security Posture Management (CSPM)

SaaS Security Posture Management (SSPM)

Breach & Attack Simulation (BAS)

Job description

A leading financial institution in the UK is seeking a Continuous Threat Exposure Management (CTEM) Lead to drive its enterprise-wide CTEM strategy. The role involves identifying, prioritizing, and mitigating cyber threats across various environments. The ideal candidate will have experience in cybersecurity, strong leadership skills, and familiarity with technologies like CSPM, SSPM, and BAS. This position is crucial to enhance security measures and protect the organization's assets.