Senior Attack Surface Engineer: Drive Exposure Reduction

ShorePoint, LLC; Albuquerque (NM); On-site; USD 120,000 - 190,000; Full time

Benefits offered by this job

144 hours PTO

11 holidays

85% of insurance premiums covered

401(k)

Continuing education & certification

Certification maintenance & reimburse

Job summary

ShorePoint, LLC is seeking a Senior Attack Surface Management Engineer to identify and reduce cyber exposure across enterprise infrastructure, applications, and environments. You will work with operations and engineering to prioritize remediation and strengthen defensive posture.

The role requires 10+ years of experience, strong analytical skills, and the ability to translate complex requirements into actionable tasks while collaborating with cyber operations and compliance teams.

Qualifications

• Bachelor’s degree required; a postgraduate degree may substitute for 6 years of experience.
• 10+ years of relevant work experience.
• Experience in attack surface management, exposure analysis and vulnerability prioritization.
• Experience collaborating across cyber operations, engineering and compliance teams.
• Strong documentation and reporting skills.

Responsibilities

• Identify and assess attack surface exposure across systems and assets.
• Support risk assessments and prioritize remediation based on threat relevance.
• Partner with threat hunting, vulnerability management and engineering teams.
• Recommend and support implementation of technical controls to reduce exploitability.
• Contribute to security assessments and gap analyses related to data coverage and detection.

Skills

Attack surface management

Threat intelligence

Vulnerability prioritization

Cross-team collaboration

Documentation & reporting

Education

Bachelor’s degree

Postgraduate degree substitute 6 years experience

Tools

Security clearance experience

Job description

ShorePoint, LLC is seeking a Senior Attack Surface Management Engineer to identify and reduce cyber exposure across enterprise infrastructure, applications, and environments. You will work with operations and engineering to prioritize remediation and strengthen defensive posture.

The role requires 10+ years of experience, strong analytical skills, and the ability to translate complex requirements into actionable tasks while collaborating with cyber operations and compliance teams.