Senior Attack Surface & Exposure Engineer

EY; Wrocław; Hybrid; PLN 180,000 - 270,000; Full time

Benefits offered by this job

Continuous learning

Career growth

Leadership coaching

Diversity & inclusion

Job summary

EY GDS Poland is seeking a senior Attack Surface Validation & Exposure Engineer to lead automated attack-path discovery and scalable vulnerability validation across EY’s environment. The role partners with Red Team and Threat Intelligence to identify susceptibilities and drive secure, rapid remediation.

Located in Poland with a hybrid work pattern (2 days in office, 3 days remote), you will shape strategy and engineering solutions to reduce attack surface while enabling business growth.

Qualifications

• Minimum combined 8 years in vulnerability/exposure management, offensive security and security engineering
• Experience analyzing vulnerability and security posture data
• Deep understanding of attack paths, misconfigurations and control failures
• Proven ability to build scalable vulnerability and exposure solutions
• Experience operating at a strategic level with risk context
• Excellent communication skills with senior stakeholders
• Ability to manage competing priorities in a global environment

Responsibilities

• Design and engineer automated attack-path discovery and validation capabilities
• Build scalable vulnerability detection and verification pipelines
• Develop controlled exploitation workflows to demonstrate attacker outcomes
• Operationalize continuous offensive validation with automated testing routines
• Fuse vulnerability and threat intelligence into detection and prioritization
• Produce reproducible evidence and remediation recommendations
• Collaborate with Red Team, Exposure Assessment, Threat Detection and VM stakeholders

Job description

EY GDS Poland is seeking a senior Attack Surface Validation & Exposure Engineer to lead automated attack-path discovery and scalable vulnerability validation across EY’s environment. The role partners with Red Team and Threat Intelligence to identify susceptibilities and drive secure, rapid remediation.

Located in Poland with a hybrid work pattern (2 days in office, 3 days remote), you will shape strategy and engineering solutions to reduce attack surface while enabling business growth.