Cyber Threat Exposure Management – Lead

Version 1; Bengaluru; On-site; INR 4,000,000 - 6,000,000; Full time

Benefits offered by this job

Pension

Private Healthcare

Life Assurance

Educational assistance

Remote-friendly

Excellence Awards

Gym Discounts

Diversity & Inclusion

Wellbeing programs

Job summary

Version 1 seeks a Senior Security Lead to own strategy across attack surface management, vulnerability management, and cloud security posture using CTEM. You will govern tooling, drive maturity, and influence senior stakeholders while coaching a team.

The role requires deep technical expertise, cross-functional collaboration, and the ability to shape a capability roadmap with measurable outcomes. Remote-friendly with hybrid options in India.

Qualifications

• 6+ years in cyber security with 2+ years in senior exposure management, VM, or threat intelligence.
• Certification in CISSP, CISM, OSCP or CTEM-related training advantageous.
• Experience evaluating security tooling across EASM/CAASM, CSPM, and VM platforms.

Responsibilities

• Own strategy and programme direction for CTEM, ASM, VM, and CSPM.
• Drive governance, tool selection, and exposure management roadmap.
• Lead vulnerability management end-to-end including triage, remediation, and SLAs.
• Integrate exposure management with SIEM, SOAR, and DevSecOps pipelines.
• Lead, coach, and develop the security team; report to senior stakeholders.

Skills

Cyber security

Exposure management

Vulnerability management

CTEM

Cloud security

Security tooling

NIST CSF/ISO 27001

ISPM/attack path mapping

Education

CS/InfoSec degree

CISSP

CISM

OSCP

Tools

Defender XDR

CSPM

EASM/CAASM

Tenable

Tanium

Job description

Version 1 has celebrated30 yearsinbusinessand continues to be trusted by global brands to delivertechnology and transformationsolutions that drive customer success. Ourdeepexpertiseenables our customers to navigate the rapidlyevolving technology landscape. We foster strong partnerships withglobal technology leadersincluding Microsoft, AWS, Oracle, Red Hat,OutSystems, Snowflake, ensuring that our customers are provided with the highest quality solutions and services.

We’rean award-winning employer reflecting how our employees are at the very heartof whatwe do:

• 10+ years as a Great Place to Work in Ireland & UK
• Best Workplace for Women in the UK & Ireland by GPTW
• Best Workplace for Wellbeing in the UK by GPTW

We’rea corevalues drivencompany, we hire people who share our values, and we reward those who display and foster them,it’sdeeply embedded within our DNA. Invest in us andwe’llinvest in you!.

Job Description

Senior technical lead to own strategy and drive maturity across attack surface management, vulnerability management, and cloud security posture using a continuous threat exposure management (CTEM) approach.

Accountable for programme delivery quality, tooling strategy, and governance. Requires deep technical expertise combined with the ability to lead and coach a team, shape a capability roadmap, and influence senior stakeholders without direct supervision.

Key Responsibilities

Strategy & Programme Direction

• Own function strategy aligned to business risk appetite and security frameworks.
• Drive continuous improvement across all CTEM programme phases.
• Establish governance and standards across vulnerability management, ASM, CSPM, and secure development.
• Own the exposure management roadmap; present evidence-based investment cases to senior stakeholders.

Tool Selection & Capability Development

• Own toolchain selection for EASM/CAASM, vulnerability management, CSPM, and exposure correlation.
• Integrate exposure management platforms with SIEM, SOAR, and DevSecOps pipelines.
• Monitor emerging tooling and AI-augmented triage; recommend capability investments.
• Define coverage requirements and onboarding standards for new assets and workloads.
• Run continuous discovery and attribution of all Internet-facing assets, shadow IT, and third-party exposure.
• Enrich findings with threat intelligence, KEV data, and active exploitation trends.
• Maintain an accurate inventory as the authoritative basis for prioritisation.
• Continuously improve coverage, reduce noise, and sharpen the prioritisation model.

Vulnerability Management

• Own the vulnerability management programme end to end: triage, remediation, SLA governance, and closure.
• Maintain risk-based scoring incorporating CVSS, EPSS, business criticality, and threat context.
• Hold remediation teams to SLAs; resolve systemic blockers across functions.

Cloud Security Posture Management (CSPM)

• Own CSPM strategy across AWS, Azure, and OCI; keep visibility current with estate growth.
• Partner with cloud platform and architecture teams to embed security posture requirements into platform design and IaC standards.
• Eliminate recurring misconfigurations through root cause analysis; don't accept repeat findings.
• Commission and manage penetration testing and purple team engagements; QA external deliverables.
• Translate findings into prioritised remediation and track to closure.
• Use validation outputs to improve controls and update the exposure model.

Secure SDLC

• Integrate security requirements, threat modelling, and code review into the SDLC.
• Drive secure-by-design principles with engineering and architecture teams.
• Measure secure development maturity and set improvement targets.

Leadership, Reporting & Stakeholder Engagement

• Deliver executive dashboards translating technical risk into business impact; represent the function in ISO 27001, Cyber Essentials Plus, SOC 1, and MSP audit cycles.
• Build credibility with senior stakeholders, client security teams, and third-party assessors.
• Lead, coach, and develop the team; set clear goals, resolve conflicts, and create growth opportunities.
• Foster a culture of learning and delivery excellence; act as escalation point for complex technical decisions.
• Coordinate remediation owners, platform teams, and external parties; keep all stakeholders aligned on plans and blockers.

Qualifications

Beneficial Qualifications & Skills

• 6+ years’ experience in cyber security, 2+ years in a senior exposure management, VM, or threat intelligence role; degree in Computer Science or Information Security, or equivalent.
• Relevant certifications: CISSP, CISM, OSCP, or equivalent. CTEM-related training or Gartner CTEM methodology experience advantageous.
• Experience evaluating and selecting security tooling across EASM/CAASM, CSPM, and VM platforms; hands-on with Defender XDR/CSPM, Zscaler, Tenable, Tanium, or equivalent.
• Deep working knowledge of NIST CSF, ISO 27001, MITRE ATT&CK, and CTEM principles.
• ISPM and attack path mapping experience; ability to communicate technical exposure as business risk to senior stakeholders.
• Experience designing or maturing a CTEM programme; familiarity with AI-augmented vulnerability triage, attack path analysis, or BAS.
• Exposure to audit frameworks (Cyber Essentials Plus, SOC 1, FSQS) or MSP/MSSP environment.

Additional Information

Why Version 1?

At Version 1, we believe in providing our employees with a comprehensive benefits package that prioritises their wellbeing, professional growth, and financial stability.

Share in our success with our Quarterly Performance-Related Profit Share Scheme, where employees collectivelybenefitfrom a share of our company's profits

Strong Career Progression & mentorship coaching through our Strength in Balance & Leadership schemes with a dedicated quarterly Pathways Career Development programme

Flexible/remote working, Version 1 is tremendously understanding of life events and people’s individual circumstances and offer flexibility to help achieve a healthy work life balance

Financial Wellbeing initiativesincluding;Pension, Private Healthcare Cover, Life Assurance, Financialadviceand an Employee Discount scheme

Employee Wellbeing schemes including Gym Discounts, Bike to Work, Fitness classes, Mindfulness Workshops, Employee Assistance Programme and much more. Generous holiday allowance, enhanced maternity/paternity leave, marriage/civil partnership leave and special leave policies

Educationalassistance, incentivised certifications, and accreditations, including AWS, Microsoft, Oracle, and Red Hat

Reward schemes including Version 1’s Annual Excellence Awards & ‘Call-Out’ platform.

Environment, Social and Community First initiatives allow you to get involved in local fundraising and development opportunities as part of fostering our diversity, inclusion and belonging schemes.

And many more exciting benefits… drop us a note to find out more.

Version1 is an equal opportunities employer.

We are committed to building a diverse,inclusiveand respectful workplace where everyone feels valued and able to thrive. We welcome applications from people of all backgrounds, identities and lived experiences, and we value the different perspectives people bring including those shaped by disability and neurodiversity.

We want every candidate to have a positive and accessible recruitment experience. If you need reasonable adjustments at any stage of the process, please contact your recruiter at Version 1. We will consider all requests carefully,respectfullyand confidentially.