Remote Attack Surface Engineer – EASM & Validation

Apex Systems; Charlotte (NC); Remote; USD 131.000 - 139.000; Teilzeit

Benefits dieser Stelle

Remote work

Comprehensive benefits package

401(k) company match

ESPP

Zusammenfassung

Everforth Apex Systems seeks a Cyber Security Engineer specializing in Attack Surface Management. This role designs, implements, and matures security validation capabilities across enterprise systems, focusing on external attack surface validation with EASM tools.

You will collaborate with cross-functional teams to simulate TTPs, evaluate control effectiveness, and align with risk management and regulatory standards. Remote-friendly with Charlotte, NC location option.

Qualifikationen

• Bachelor's degree or equivalent job experience required.
• Experience in offensive security, red teaming, networks, and web applications.
• Proficiency in Python for automation, data wrangling, and enrichment.
• Experience with BAS or CSV tools.
• Hands-on experience architecting, maturing, and automating CI/CD pipelines.
• Experience with penetration testing, vulnerability management, and security tools.

Aufgaben

• Design, implement, and mature security validation capabilities.
• Utilize External Attack Surface Management (EASM) tools for continuous security validation.
• Integrate security validation with existing infrastructure to provide actionable insights.
• Partner with cross-functional teams to simulate adversarial TTPs.
• Evaluate security control effectiveness and recommend enhancements.
• Ensure alignment with enterprise risk management and regulatory standards.

Kenntnisse

Offensive security

Detection engineering

Python scripting

BAS/CSV tools

CI/CD automation

Penetration testing

Vulnerability management

Security tooling

Ausbildung

Bachelor's degree or equivalent

Tools

Splunk

CrowdStrike Next-Gen SIEM

Microsoft Sentinel

Jobbeschreibung

Everforth Apex Systems seeks a Cyber Security Engineer specializing in Attack Surface Management. This role designs, implements, and matures security validation capabilities across enterprise systems, focusing on external attack surface validation with EASM tools.

You will collaborate with cross-functional teams to simulate TTPs, evaluate control effectiveness, and align with risk management and regulatory standards. Remote-friendly with Charlotte, NC location option.