Advanced Security Engineer - Exposure Management

Relativity ODA LLC; Illinois; Ibrido; USD 120.000 - 160.000; Tempo pieno

Descrizione del lavoro

Relativity ODA LLC is seeking an Advanced Security Engineer to strengthen exposure management. This hands-on role identifies vulnerabilities, misconfigurations, unmanaged assets, and container/API posture risks across the technology estate, and translates findings into a prioritized view for remediation.

You will build dashboards, measure coverage and aging, and coordinate reduction campaigns with owning teams, working with governance risk intel and product security enablement to close

Mansioni

• Identify internet-facing, unmanaged, shadow, and newly introduced assets across the technology estate.
• Reconcile discovery results with asset inventories and ownership data; investigate coverage gaps.
• Develop repeatable workflows and automation to reduce discovery latency and improve data quality and visibility.
• Analyze vulnerabilities and misconfigurations; correlate findings with exploitability and asset criticality.
• Design and document risk-ranked exposure backlog and communicate to stakeholders.
• Maintain inventory and risk view of live containers and APIs; correlate with runtime context.
• Integrate threat intelligence into exposure scoring and prioritization.
• Build dashboards and data pipelines showing residual exposure risk by department, asset class, or age.
• Coordinate exposure-reduction campaigns; track timelines and escalations.
• Provide guidance without owning risk acceptance or policy decisions.

Descrizione del lavoro

Posting Type

Hybrid/Remote

Job Overview

The Advanced Security Engineer is a technically deep, hands-on practitioner who strengthens the organization's Exposure Management capability. This role identifies and contextualizes vulnerabilities, misconfigurations, unmanaged assets, and container and API posture risks across the technology estate; correlates findings with asset criticality, exploitability, compensating controls, internet exposure, and threat intelligence; and translates them into a prioritized, continuously updated view of the exposures that matter most. Working closely with engineering and department leaders, Governance Risk Intelligence, Product Security Enablement, Adaptive Security, the Purple Team, Threat Detection & Response, and application and service owners, this engineer improves discovery and context coverage, makes residual risk and exposure aging visible, and coordinates reduction campaigns that help owning teams act on the highest-priority exposures. The role drives prioritization, reporting, and remediation follow-through while leaving risk-acceptance decisions, policy setting, and remediation execution with the accountable teams.

Exposure & Attack Surface Discovery

• Operate and optimize exposure and external attack-surface discovery capabilities to identify internet-facing, unmanaged, shadow, and newly introduced assets across the technology estate.
• Reconcile discovery results with authoritative asset inventories and ownership data, investigate coverage gaps, and improve attribution of assets to the responsible application, service, or department.
• Develop repeatable workflows and automation that reduce discovery latency and increase coverage, data quality, and visibility across relevant asset classes.

Vulnerability & Misconfiguration Prioritization

• Analyze vulnerabilities and misconfigurations from exposure management and partner-team data sources, correlating findings with exploitability, asset criticality, internet exposure, compensating controls, and available threat intelligence.
• Design, tune, and document contextual prioritization logic that moves decision-making beyond raw severity scores and produces a defensible, risk-ranked exposure backlog.
• Perform detailed exposure analysis for high-impact vulnerabilities, zero-days, and material misconfigurations, and communicate why an exposure matters to technical and non-technical stakeholders.
• Partner with the Purple Team and other security functions to validate prioritization assumptions and improve correlation between top-priority exposures and confirmed exploitability.

Container & API Runtime Posture

• Maintain an accurate inventory and standing risk view of live containers and APIs, including running-image risk, workload ownership, API posture, and relevant production context.
• Correlate build- and deployment-time findings received from Adaptive Security with production runtime context to determine whether identified risks remain relevant once workloads are live.
• Identify systemic container and API posture issues and develop prioritized remediation campaigns for application- and service-owning teams.

Threat Intelligence Integration

• Integrate external and internal threat intelligence into exposure scoring and prioritization, including active exploitation, adversary behavior, and emerging-vulnerability signals.
• Maintain awareness of changes in the threat landscape and assess their relevance to the organization's exposed technologies, assets, containers, and APIs.
• Produce timely, actionable notifications when new intelligence materially changes the likelihood or priority of an existing exposure.

Residual Risk Visibility & Reporting

• Build and maintain dashboards, reporting, and data pipelines that show residual exposure risk by department, asset class, severity tier, ownership, and age.
• Define and monitor measures such as discovery coverage, context coverage, exposure aging, reduction rate, and residual-risk trend; investigate data-quality or performance issues that affect reporting trustworthiness.
• Translate complex exposure data into clear technical findings, trends, and recommended actions for engineering leadership, department leaders, Governance Risk Intelligence, and service-owning teams.

Exposure Reduction Coordination

• Track high-priority exposures against expected remediation timelines, identify aging and overdue items, and coordinate follow-through with accountable application- and service-owning teams.
• Plan and run targeted exposure-reduction campaigns, establish measurable outcomes, and report progress, blockers, and residual risk to relevant stakeholders.
• Route exposures requiring risk-acceptance guidance to the owning team and Governance Risk Intelligence, and route findings requiring manual review, threat modeling, or adversary validation to the appropriate security function.
• Provide technical guidance and prioritization context without assuming ownership of risk acceptance, policy decisi