Exposure Management SME

Tata Consultancy Services Limited; Swords; Hybrid; EUR 90,000 - 150,000; Full time

Benefits offered by this job

Pension

Health care

Life assurance

Laptop

Phone

Extensive training resources

Discounts within Tata network

Job summary

Tata Consultancy Services UK&I is seeking an experienced Cyber Security Leader to own and operate exposure management programs across hybrid environments. You will leverage EASM and CrowdStrike capabilities to identify, assess and reduce cyber risk while coordinating remediation with technical and business stakeholders.

The role demands deep expertise in vulnerability management, attack surface reduction and security posture reporting across cloud, on-prem, and internet-facing assets.

Qualifications

• Experience leading enterprise-wide exposure and vulnerability programs across cloud, on-premises, and internet-facing assets.
• Strong understanding of cyber risk management, exposure prioritization and remediation governance.
• Ability to collaborate with technical and business stakeholders to improve security posture.

Responsibilities

• Own and operate the Exposure Management programme across company, leveraging EASM and CrowdStrike to reduce cyber risk exposures.
• Drive risk-based remediation of vulnerabilities, misconfigurations, exposed assets, attack paths and weaknesses across infrastructure, endpoints, apps, APIs, cloud, data platforms, and identity systems.

Skills

Exposure Management

Vulnerability Management

Attack Surface Management

Security Posture Management

Threat Prioritization

Risk-based Remediation

Security Governance

Cloud Security

Secure Score Improvement

Tools

Qualys VMDR

Qualys EASM

Qualys Policy Compliance

CrowdStrike Exposure Management

CrowdStrike Falcon

Microsoft Defender Vulnerability Management

Microsoft Defender for Endpoint

Microsoft Defender for Cloud

Azure Security Center

AWS Security Hub

Jira

Job description

Job Type: Permanent

Location: Dublin (Hybrid 3 days in office)

Careers at TCS: It means more

TCS is a purpose-led transformation company, built on belief. We do not just help businesses to transform through technology. We support them in making a meaningful difference to the people and communities they serve - our clients include some of the biggest brands in the UK and worldwide. For you, it means more to make an impact that matters, through challenging projects which demand ambitious innovation and thought leadership.

Own and operate the Exposure Management programme across company by leveraging Qualys External Attack Surface Management (EASM) and CrowdStrike Exposure Management capabilities to identify, assess, prioritize, track, and reduce cyber risk exposures across internal and external environments. Drive risk-based remediation of vulnerabilities, misconfigurations, exposed assets, attack paths, and security weaknesses across infrastructure, endpoints, applications, APIs, cloud services, data platforms, and identity systems. Collaborate with technology and business stakeholders to improve overall security posture, enhance visibility of cyber risk, and ensure timely remediation of critical findings.

Your Profile

Experienced Cyber Security Professional with strong expertise in Exposure Management, Vulnerability Management, Attack Surface Management, and Security Posture Management. Proven experience managing enterprise-wide vulnerability and exposure programs across cloud, infrastructure, endpoints, applications, APIs, data platforms, and internet-facing assets. Strong understanding of cyber risk management, attack surface reduction, vulnerability prioritization, remediation governance, and security posture reporting. Ability to collaborate with technical and business stakeholders to provide visibility of risk exposure and drive remediation initiatives across large-scale enterprise environments.

Essential skills/knowledge/experience:

• External Attack Surface Management (EASM)
• Internal Exposure Management and Asset Discovery
• Vulnerability Management and CVE Prioritization
• Risk-Based Vulnerability Remediation
• Cloud Security Posture Management
• Endpoint Security Exposure Assessment
• Network Security Exposure Monitoring
• Identity and Privileged Access Exposure Reviews
• Application and API Exposure Management
• Security Posture Assessment and Reporting
• Bug Bounty Coordination and Vulnerability Validation
• Exposure Remediation Governance and Tracking

Strong knowledge of:

• CVSS Risk Scoring Methodology
• Common Vulnerabilities and Exposures (CVE)
• Common Weakness Enumeration (CWE)
• MITRE ATT&CK Framework
• NIST Cybersecurity Framework
• Vulnerability Management Lifecycle
• Exposure Management Principles
• External Attack Surface Management (EASM)
• Security Posture Management
• Threat and Risk-Based Prioritization
• Asset Inventory and Exposure Visibility
• Security Governance and Risk Managemen

Proficiency in penetration testing tools such as:

• Qualys VMDR
• Qualys External Attack Surface Management (EASM)
• Qualys Policy Compliance
• CrowdStrike Exposure Management
• CrowdStrike Falcon
• Microsoft Defender Vulnerability Management
• Microsoft Defender for Endpoint
• Microsoft Defender for Cloud
• Microsoft Secure Score
• Microsoft Exposure Management
• Microsoft Entra ID Security Assessments
• Azure Security Center
• AWS Security Hub
• Jira

Desirable skills/knowledge/experience:

• Hands-on experience in Exposure Management, Vulnerability Management, Security Posture Management, or Cyber Security Operations.
• Experience working with Security Operations, Threat Intelligence, and Incident Response teams.
• Understanding of Secure Score improvement initiatives and continuous security posture optimization.
• Knowledge of attack path analysis and Exposure Prioritization Frameworks.
• Experience coordinating Bug Bounty and Vulnerability Disclosure Programs.
• Understanding of ISO 27001, NIST, CIS Controls, GDPR, and PCI-DSS compliance requirements.
• Preferred Certification: Qualys VMDR EASM Specialist, CSPM, SC-200,100,500,CISSP , CRISC, AWS Security Speciality.

Rewards & Benefits

TCS is consistently voted a Top Employer in the UK and globally. Our competitive salary packages feature pension, health care, life assurance, laptop, phone, access to extensive training resources and discounts within the larger Tata network.

We offer health & wellness initiatives and sports events; we are the proud sponsor of the London Marathon.

Diversity, Inclusion and Wellbeing

Tata Consultancy Services UK&I is committed to meeting the accessibility needs of all individuals in accordance with the UK Equality Act 2010 and the UK Human Rights Act 1998.

We welcome and embrace diversity in race, nationality, ethnicity, disability, neurodiversity, gender identity, age, physical ability, gender reassignment, sexual orientation. We are a disability inclusive employer and encourage disabled people to apply for this role.

Due to the high volume of applications, we will be unable to contact each applicant individually on the status of their application. If you have not received a direct response within 30 days, then it should be deemed unsuccessful on this occasion.