Global Lead, Attack Surface Management (f/m/d)

Danaher Corporation; Kraków; On-site; PLN 350,000 - 550,000; Full time

Job summary

Danaher Corporation in Kraków, Poland, seeks a Global Lead for Attack Surface Management to own the ASM/EASM/CAASM program and drive discovery, attribution, and remediation governance across internet-facing, cloud, and third-party surfaces.

You will architect the ASM operating model, automate discovery, and design governance with clear ownership and remediation SLAs, embedded in CTEM and DIS.

Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Engineering, or related field.
• 7–9 years of cybersecurity experience with a focus on attack surface management/exposure management.
• Experience leading enterprise ASM/EASM/CAASM discovery, attribution, and remediation governance across internet-facing, cloud, and third-party surfaces.
• Hands-on experience with ASM platforms and reconnaissance tooling such as CortexXpanse, Defender EASM, CyCognito, Censys, or Shodan.
• Ability to drive asset ownership and remediation independently and report external risk to stakeholders.

Responsibilities

• Architect the ASM operating model: outside-in discovery, attribution, asset-ownership workflows, and risk prioritization for CTEM.
• Engineer/automate discovery correlation and enrichment (APIs, scripting) across EASM/CAASM, DNS, certificates, and CMDB sources.
• Design integration blueprints connecting asset visibility to vulnerability, threat intel, and remediation platforms.
• Design the sustainability and governance model: ownership assignment, remediation SLAs, and external hygiene checks.

Skills

Attack surface management

Threat exposure governance

Leadership

Education

Bachelor’s degree in Cybersecurity

Tools

CortexXpanse

Defender EASM

CyCognito

Censys

Shodan

Job description

Bring more to life.

At Danaher, our work saves lives. And each of us plays a part. Fueled by our culture of continuous improvement, we turn ideas into impact – innovating at the speed of life.

Our 60,000+ associates work across the globe at more than 15 unique businesses within life sciences, diagnostics, and biotechnology.

Are you ready to accelerate your potential and make a real difference? At Danaher, you can build an incredible career at a leading science and technology company, where we’re committed to hiring and developing from within. You’ll thrive in a culture of belonging where you and your unique viewpoint matter.

Learn about the Danaher Business System which makes everything possible.

At Danaher, the Global Lead, Attack Surface Management owns the ASM/EASM/CAASM capability — discovery, attribution, asset ownership, risk prioritization, and cross-functional remediation across internet-facing, internal, cloud, SaaS, subsidiary, and third-party surfaces. Enterprise strategy is set by leadership; the Global Lead shapes and refines the ASM strategy, then owns operationalizing it as part of CTEM. The Global Lead works independently and drives remediation across teams that each own their own assets.

This position reports to the Senior Manager, Exposure Management (CTEM) and is part of the Danaher Information Security (DIS)locatedin Krakow, Poland and will be an on-site role.

This is a Danaher Corporate role, hosted by our Cytiva operating company in Kraków.

In this role, you will have the opportunity to:

• Architect the ASM operating model: outside-in discovery, attribution, asset-ownership workflows, and risk prioritization feeding CTEM.

• Engineer/automate discovery correlation and enrichment (APIs, scripting) across EASM/CAASM, DNS, certificate transparency, and CMDB sources.

• Design integration blueprints connecting asset visibility to vulnerability, threat intel, and remediation platforms.

• Design the sustainability & governance model: ownership assignment,remediationSLAs, and external-hygiene control checks.

The essential requirements of the job include:

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Engineering, or related field.

• Extensive cybersecurity experience (7-9 years preferably) with a focus on attack surface management, exposure management, or offensive/recon security (GCRF P4 Bachelor’s-track minimum; recommended, pending Comp sign-off).

• Experience leading or operating enterprise ASM/EASM/CAASM discovery, attribution, and remediation governance across internet-facing, cloud, and third-party surfaces.

• Hands-on experience with ASM platforms and reconnaissance tooling (such as CortexXpanse, Defender EASM,CyCognito,Censys, or Shodan) and internet fundamentals (TCP/IP, DNS, TLS/certificates, domains).

• Experience working independently to drive asset ownership and remediation across infrastructure, cloud, and third-party teams and reporting external risk to stakeholders.

It would be a plus if you alsopossesspreviousexperience in:

• Experience with digital risk protection or M&A/subsidiary security integration.

• Scripting for API integration and automation (Python preferred).

• CISSP, CISM, OSCP, CRTO, GCIH, GIAC (GOSI/GPEN/GSEC), or avendorASM/CAASM certification.

#LI-KK1

For more information, visit www.danaher.com.