Attack Surface & Exposure Security Engineer

AnaVation LLC; Reston (VA); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

Generous medical insurance

Dental insurance

Vision insurance

401k with match

Paid leave & holidays

Tuition reimbursement

Life and AD&D

Job summary

AnaVation LLC is seeking a Security Infrastructure & Exposure Engineer in Reston, VA to design and scale attack surface management and threat exposure detection. You will build internal tools and automated pipelines that map assets, model attack paths, and reduce security blind spots before exploitation.

Preferred candidates hold TS/SCI clearance with CI Polygraph, a BS degree and 8+ years of related experience, plus certifications and hands-on cloud security, IaC, and CI/CD security expertise.

Qualifications

• Active TS/SCI clearance with CI Polygraph is required.
• Bachelor’s degree and 8 years of related experience are required.
• Active certifications for IAT Level II and CSSP Infrastructure Support are required.

Responsibilities

• Design, build, and scale attack surface management and threat exposure detection.
• Engineer internal tools and automated pipelines for asset discovery and mapping.
• Integrate scanning data with IdP telemetry to identify exposed infrastructure.
• Embed vulnerability testing into IaC and CI/CD pipelines.
• Harden cloud architectures and validate security in AWS/GCP/Azure.

Skills

Active TS/SCI clearance

Bachelor’s degree

8 years experience

Go/Rust/Python

CAASM tooling

Network topology

Cloud security

Terraform/OpenTofu

CI/CD security

Education

Bachelor’s degree

Tools

CAASM tooling

Terraform

OpenTofu

CI/CD pipelines

Job description

AnaVation LLC is seeking a Security Infrastructure & Exposure Engineer in Reston, VA to design and scale attack surface management and threat exposure detection. You will build internal tools and automated pipelines that map assets, model attack paths, and reduce security blind spots before exploitation.

Preferred candidates hold TS/SCI clearance with CI Polygraph, a BS degree and 8+ years of related experience, plus certifications and hands-on cloud security, IaC, and CI/CD security expertise.