CTEM & Cloud Exposure Management Lead

SoftServe; Polska; Hybrid; PLN 180,000 - 240,000; Full time

Benefits offered by this job

Work from home or office options (hyb"

Job summary

SoftServe seeks a seasoned security leader to design and operationalize CTEM and exposure management across AWS and GCP. You will drive risk-based vulnerability programs, attack-path analysis, and business-context prioritization to reduce real-world risk.

You will collaborate with cloud security, engineering, governance, and platform teams to mature the exposure program and deliver measurable risk reductions while communicating progress to executives.

Qualifications

• 5+ years of experience in cloud security, vulnerability management, exposure management, or offensive security.
• Strong understanding of CTEM principles and risk-based security programs.
• Experience with CNAPP solutions (preferably Upwind or Wiz).
• Experience performing attack-path analysis and exposure validation.
• Strong knowledge of AWS and GCP security architecture.
• Understanding of IAM security, privilege escalation paths, and identity exposure risks.
• Experience building or operating vulnerability management programs.
• Experience collaborating with engineering and platform teams to drive remediation.
• Strong analytical and stakeholder communication skills.
• Very good English level (B2+-C1).
• Exposure management, attack surface management, or security operations experience is a plus.
• Offensive security or penetration testing background would be nice to have.
• Experience with cloud AI environments and AI infrastructure security is a plus.
• Experience with security telemetry and detection engineering are nice to have.
• Industry-recognized security certifications (AWS Certified Security – Specialty, CISSP, etc.) are advantageous.
• Familiarity with MITRE ATT&CK and MITRE ATLAS is advantageous.

Responsibilities

• Design and implement the CTEM and risk-based vulnerability management program, including recommending the framework it follows.
• Define the prioritization methodology that combines vulnerabilities, misconfigurations, identity exposures, and business context.
• Analyze cloud attack paths and chains to identify and validate the highest-risk exposure scenarios.
• Define remediation SLAs and separate workflows for backlog, new, and emergency findings, aligned with GRC exception and risk acceptance processes.
• Build executive reporting focused on risk reduction and exposure metrics.

Job description

SoftServe seeks a seasoned security leader to design and operationalize CTEM and exposure management across AWS and GCP. You will drive risk-based vulnerability programs, attack-path analysis, and business-context prioritization to reduce real-world risk.

You will collaborate with cloud security, engineering, governance, and platform teams to mature the exposure program and deliver measurable risk reductions while communicating progress to executives.