Exposure Management SME

Tata Consultancy Services Limited; Dublin; Hybrid; EUR 110,000 - 140,000; Full time

Benefits offered by this job

Pension

Health care

Life assurance

Laptop

Phone

Training resources

Discounts within Tata network

Job summary

Tata Consultancy Services Limited in Dublin is seeking an Experienced Cyber Security Professional to own and operate the Exposure Management programme. You will leverage EASM and CrowdStrike to identify and reduce cyber risk across internal and external environments, driving risk-based remediation across cloud, infrastructure, endpoints, applications, APIs, and data platforms.

The role requires strong expertise in Exposure Management, Vulnerability Management, and Security Posture Management,

Qualifications

• Experience performing External Attack Surface Management (EASM)
• Experience performing Internal Exposure Management and Asset Discovery
• Experience with Vulnerability Management and CVE prioritization
• Experience with Risk-Based Vulnerability Remediation
• Experience with Cloud Security Posture Management
• Experience with Endpoint Security Exposure Assessment
• Experience with Network Exposure Monitoring
• Experience with Identity and Privileged Access Exposure Reviews
• Experience with Application and API Exposure Management
• Experience with Security Posture Assessment and Reporting
• Experience with Bug Bounty Coordination and Vulnerability Validation
• Exposure Remediation Governance and Tracking

Responsibilities

• Own and operate the Exposure Management programme across the company leveraging EASM and CrowdStrike to identify and reduce cyber risk exposures
• Drive risk-based remediation of vulnerabilities, misconfigurations, exposed assets, attack paths, and security weaknesses
• Collaborate with technology and business stakeholders to improve security posture and timely remediation of critical findings

Skills

EASM

Exposure Mgmt

Vulnerability Mgmt

Cloud Security

Endpoint Security

Network Exposure

Identity & Privileged Access

Application Exposure

Security Posture

Bug Bounty Coordination

Tools

Qualys VMDR

Qualys EASM

Qualys Policy Compliance

CrowdStrike Exposure Management

CrowdStrike Falcon

Microsoft Defender Vulnerability Management

Microsoft Secure Score

Microsoft Exposure Management

Azure Security Center

AWS Security Hub

Jira

Job description

Job Type: Permanent

Location: Dublin (Hybrid 3 days in office)

Careers at TCS: It means more

TCS is a purpose-led transformation company, built on belief. We do not just help businesses to transform through technology. We support them in making a meaningful difference to the people and communities they serve - our clients include some of the biggest brands in the UK and worldwide. For you, it means more to make an impact that matters, through challenging projects which demand ambitious innovation and thought leadership.

Own and operate the Exposure Management programme across company by leveraging Qualys External Attack Surface Management (EASM) and CrowdStrike Exposure Management capabilities to identify, assess, prioritize, track, and reduce cyber risk exposures across internal and external environments. Drive risk-based remediation of vulnerabilities, misconfigurations, exposed assets, attack paths, and security weaknesses across infrastructure, endpoints, applications, APIs, cloud services, data platforms, and identity systems. Collaborate with technology and business stakeholders to improve overall security posture, enhance visibility of cyber risk, and ensure timely remediation of critical findings

Your Profile

Experienced Cyber Security Professional with strong expertise in Exposure Management, Vulnerability Management, Attack Surface Management, and Security Posture Management. Proven experience managing enterprise-wide vulnerability and exposure programs across cloud, infrastructure, endpoints, applications, APIs, data platforms, and internet-facing assets. Strong understanding of cyber risk management, attack surface reduction, vulnerability prioritization, remediation governance, and security posture reporting. Ability to collaborate with technical and business stakeholders to provide visibility of risk exposure and drive remediation initiatives across large-scale enterprise environments.

Essential skills/knowledge/experience:

Experience performing:

• External Attack Surface Management (EASM)
• Internal Exposure Management and Asset Discovery
• Vulnerability Management and CVE Prioritization
• Risk-Based Vulnerability Remediation
• Cloud Security Posture Management
• Endpoint Security Exposure Assessment
• Network Security Exposure Monitoring
• Identity and Privileged Access Exposure Reviews
• Application and API Exposure Management
• Security Posture Assessment and Reporting
• Bug Bounty Coordination and Vulnerability Validation
• Exposure Remediation Governance and Tracking

Strong knowledge of:

• Common Vulnerabilities and Exposures (CVE)
• Common Weakness Enumeration (CWE)
• MITRE ATT&CK Framework
• NIST Cybersecurity Framework
• Vulnerability Management Lifecycle
• External Attack Surface Management (EASM)
• Security Posture Management
• Threat and Risk-Based Prioritization
• Asset Inventory and Exposure Visibility
• Security Governance and Risk Managemen

Proficiency in penetration testing tools such as:

• Qualys VMDR
• Qualys External Attack Surface Management (EASM)
• Qualys Policy Compliance
• CrowdStrike Exposure Management
• CrowdStrike Falcon
• Microsoft Defender Vulnerability Management
• Microsoft Secure Score
• Microsoft Exposure Management
• Azure Security Center
• AWS Security Hub
• Jira
• Hands-on experience in Exposure Management, Vulnerability Management, Security Posture Management, or Cyber Security Operations.
• Experience working with Security Operations, Threat Intelligence, and Incident Response teams.
• Understanding of Secure Score improvement initiatives and continuous security posture optimization.
• Knowledge of attack path analysis and Exposure Prioritization Frameworks.
• Experience coordinating Bug Bounty and Vulnerability Disclosure Programs.
• Understanding of ISO 27001, NIST, CIS Controls, GDPR, and PCI-DSS compliance requirements.
• Preferred Certification: Qualys VMDR EASM Specialist, CSPM, SC-200,100,500,CISSP , CRISC, AWS Security Speciality.

TCS is consistently voted a Top Employer in the UK and globally. Our competitive salary packages feature pension, health care, life assurance, laptop, phone, access to extensive training resources and discounts within the larger Tata network.

We offer health & wellness initiatives and sports events; we are the proud sponsor of the London Marathon.

Diversity, Inclusion and Wellbeing

Tata Consultancy Services UK&I is committed to meeting the accessibility needs of all individuals in accordance with the UK Equality Act 2010 and the UK Human Rights Act 1998.

We welcome and embrace diversity in race, nationality, ethnicity, disability, neurodiversity, gender identity, age, physical ability, gender reassignment, sexual orientation. We are a disability inclusive employer and encourage disabled people to apply for this role.

As a Disability Confident Employer, we offer an interview to applicants with disabilities or long-term conditions who meet the minimum criteria for the role. Please email us at [e-mail] if you would like to opt in.

If you are an applicant who needs any adjustments to the application process or interview, please contact us at [e-mail] with the subject line: “Adjustment Request” or call TCS London Office 02031552100 / [phone] to request an adjustment. We welcome requests prior to you completing the application and at any stage of the recruitment process.

Beware of Fraudulent offers

This is to notify you that TCS does not ask for any sort of payment or security deposit from candidates at any stage of the recruitment process. The firm never sends out job offers from free internet email services like Gmail, Yahoo Mail, and so on. TCS has not authorised any third-party company to collect money on their behalf. As a vigilant job seeker, beware of fraudulent recruitment activity and protect your interests! You can write to [e-mail] to report any fraudulent activity.

Due to the high volume of applications, we will be unable to contact each applicant individually on the status of their application. If you have not received a direct response within 30 days, then it should be deemed unsuccessful on this occasion.