Exposure Management Engineer (Hybrid/Remote)

LE0001 Relativity ODA LLC; Illinois; Hybrid; USD 104,000 - 156,000; Full time

Job summary

Relativity is seeking an Advanced Security Engineer to deepen exposure management by identifying internet-facing assets, misconfigurations, and API risks while aligning findings with asset criticality and threat intelligence.

You will build prioritized backlogs, create dashboards, and coordinate remediation with product teams, governance risk intelligence, adaptive security, and security operations to reduce risk across the organization.

Qualifications

• Experience in vulnerability/exposure management and attack surface management.
• Ability to prioritize exposures using exploitability, asset criticality, and threat intelligence.
• Familiarity with CVSS, NIST, MITRE ATT&CK, and CIS benchmarks.
• Proficiency in a scripting or automation language (e.g., Python, Bash, PowerShell).
• Experience communicating findings to technical and non-technical stakeholders.

Responsibilities

• Operate and optimize exposure and external attack-surface discovery capabilities.
• Analyze vulnerabilities and misconfigurations; develop risk-ranked exposure backlog.
• Maintain container and API posture inventories and remediation campaigns.
• Integrate threat intelligence into exposure scoring and prioritization.
• Build dashboards and data pipelines showing residual exposure risk by department and asset class.
• Coordinate exposure-reduction campaigns with owning teams and security functions.

Skills

Endpoint Security

Network Security

Penetration Testing

Security Architecture Design

Security Automation

SIEM

Threat Modeling

Vulnerability Management

Security Operations

Security Information and Event Mgmt

Education

Bachelor’s degree in Computer Science, Cybersecurity, Information Security, or related field

Job description

Relativity is seeking an Advanced Security Engineer to deepen exposure management by identifying internet-facing assets, misconfigurations, and API risks while aligning findings with asset criticality and threat intelligence.

You will build prioritized backlogs, create dashboards, and coordinate remediation with product teams, governance risk intelligence, adaptive security, and security operations to reduce risk across the organization.