Exposure Management Security Engineer

Relativity; Chicago (IL); Hybrid; USD 104,000 - 156,000; Full time

Job summary

Relativity is seeking an Advanced Security Engineer to strengthen exposure management across the tech estate. You will identify internet-facing assets, prioritize exposures, and drive remediation with owning teams.

The role requires hands-on work with vulnerability and attack-surface tooling, cloud security, and threat intelligence to maintain a defensible exposure backlog. You will build repeatable workflows, dashboards, and reporting to communicate risk to engineering leadership and service

Qualifications

• 2–6 years in vulnerability or exposure management.
• Experience with vulnerability/exposure management platforms.
• Ability to prioritize exposures using exploitability, asset criticality, and threat intel.
• Knowledge of OS, networks, containers, APIs, and at least one cloud platform.
• Familiarity with CVSS, NIST, MITRE ATT&CK, CIS benchmarks.
• Scripting or automation language (Python, Bash, PowerShell).
• Ability to explain findings to technical and non-technical stakeholders.

Responsibilities

• Operate exposure discovery capabilities to identify assets.
• Reconcile results with asset inventories and ownership.
• Develop automated workflows to reduce discovery latency.
• Analyze vulnerabilities and misconfigurations and prioritize.
• Design risk-ranked exposure backlog and communicate it.
• Maintain inventory of containers and APIs.
• Integrate threat intelligence into exposure scoring.
• Build dashboards showing residual exposure risk.
• Coordinate exposure-reduction campaigns with owning teams.

Skills

Vulnerability management

Exposure management

Attack surface management

Cloud security

Python

Automation scripting

Threat intelligence

Communication

Education

Bachelor's degree in CS or related

Tools

Vulnerability scanners

Threat intel feeds

SIEM tools

Automation tooling

Job description

Relativity is seeking an Advanced Security Engineer to strengthen exposure management across the tech estate. You will identify internet-facing assets, prioritize exposures, and drive remediation with owning teams.

The role requires hands-on work with vulnerability and attack-surface tooling, cloud security, and threat intelligence to maintain a defensible exposure backlog. You will build repeatable workflows, dashboards, and reporting to communicate risk to engineering leadership and service