Hybrid/Remote Exposure Management Engineer

Relativity; Illinois; Hybrid; USD 104,000 - 156,000; Full time

Job summary

Relativity is seeking an Advanced Security Engineer to strengthen exposure management across the tech estate. The role combines hands-on analysis with cross-functional coordination to reduce prioritized exposures and improve data quality for leadership.

Responsibilities include discovery optimization, vulnerability prioritization, and threat intelligence integration, with a focus on communicating risk to technical and non-technical stakeholders.

Qualifications

• 2-6 years hands-on experience in vulnerability or exposure management or attack surface management.
• Experience prioritizing exposures using exploitability, asset criticality, internet exposure and threat intel.
• Working knowledge of OS, networks, containers, APIs, and at least one major cloud platform.
• Familiarity with security frameworks such as NIST, MITRE ATT&CK, and CIS benchmarks.
• Proficiency in scripting/automation languages (Python, Bash, PowerShell).

Responsibilities

• Operate and optimize exposure discovery to identify internet-facing, unmanaged, shadow assets.
• Analyze vulnerabilities and misconfigurations, prioritize with defensible risk ranking.
• Maintain inventory of containers and APIs and assess runtime posture.
• Integrate threat intelligence into exposure scoring and prioritization.
• Build dashboards and reports showing residual exposure risk by department and age.

Skills

Vulnerability management

Exposure management

Attack surface management

Cloud security

Security automation

Threat intelligence

Python

Bash

PowerShell

Education

Bachelor's degree in Computer Science or related field

Tools

Vulnerability scanners

Cloud platforms (AWS/Azure/GCP)

Job description

Relativity is seeking an Advanced Security Engineer to strengthen exposure management across the tech estate. The role combines hands-on analysis with cross-functional coordination to reduce prioritized exposures and improve data quality for leadership.

Responsibilities include discovery optimization, vulnerability prioritization, and threat intelligence integration, with a focus on communicating risk to technical and non-technical stakeholders.