Attack Surface Architect & Exposure Engineer

Nava; Reston (VA); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

Generous medical insurance for you and

Dental insurance

Vision insurance

401k with generous match

Paid leave and holidays

Tuition reimbursement

Life and AD&D Insurance

Job summary

AnaVation is seeking a Security Infrastructure & Exposure Engineer to design, build, and scale attack surface management and threat exposure detection capabilities. You will develop internal tools and automated pipelines to map assets, model attack paths, and close security blind spots before exploitation.

The role focuses on CAASM, attack path modeling, telemetry integration, and cloud architecture defense within IAM and DevSecOps environments.

Qualifications

• Active TS/SCI clearance with CI Polygraph.
• Bachelor’s degree and 8 years of related experience.
• Certifications: IAT Level II (e.g. CompTIA Security+) and CSSP Infrastructure Support (e.g. CompTIA Cloud+).
• Multiple security certifications covering CAASM, CySA+, CND, GICSP, SCCP.

Responsibilities

• Architect and maintain Continuous Asset Attack Surface Management (CAASM) solutions for real-time asset discovery.
• Map network topologies, analyze segmentation, and build automated attack path graphs.

Skills

CAASM tooling experience

Network topology mapping

Graph modeling

Active/Passive scanning

Cloud security (AWS/GCP/Azure)

IaC (Terraform/OpenTofu)

CI/CD security validation

Identity integration (Okta/Azure AD)

Education

Bachelor’s degree

Tools

Terraform

OpenTofu

Okta

Azure AD

AWS/GCP/Azure

Job description

AnaVation is seeking a Security Infrastructure & Exposure Engineer to design, build, and scale attack surface management and threat exposure detection capabilities. You will develop internal tools and automated pipelines to map assets, model attack paths, and close security blind spots before exploitation.

The role focuses on CAASM, attack path modeling, telemetry integration, and cloud architecture defense within IAM and DevSecOps environments.