Senior Attack Surface Engineer: Validation & Exposure

EY; Austin (TX); On-site; USD 180,000 - 210,000; Full time

Job summary

EY Austin is seeking an Attack Surface Validation & Exposure Engineer to help protect EY’s digital assets. You will design automated attack-path discovery, build scalable vulnerability detection, and work with security teams to reveal and remediate exposures.

The role blends strategic thinking with hands-on engineering, requiring strong communication with senior leaders and partners across Red Team, Threat Detection, and VM to strengthen EY’s security posture.

Qualifications

• Minimum combined 8 years of experience in vulnerability management and related fields.
• Experience analyzing vulnerability and security posture data.
• Deep understanding of attack paths, misconfigurations, and control failures.
• Proven ability to build scalable solutions to vulnerability and exposure challenges.
• Experience operating at a strategic level, balancing technical depth with risk context.
• Strong analytical skills with the ability to evaluate large volumes of data.
• Excellent communication skills, with comfort engaging senior stakeholders.
• Ability to manage competing priorities and work independently in a global environment.

Responsibilities

• Design and engineer automated attack-path discovery and validation capabilities.
• Build scalable vulnerability detection and verification pipelines.
• Develop controlled exploitation and exploit-chaining workflows.
• Operationalize continuous offensive validation with minimal prompting.
• Fuse Vulnerability Intelligence and Cyber Threat Intelligence into detection and prioritization.
• Produce high-fidelity deliverables for remediation decisions.
• Partner across Red Team, Exposure Assessment, Threat Detection, and VM stakeholders.

Skills

Attention to detail

Critical thinking

Creative problem solving

Communication

Offensive security

Job description

EY Austin is seeking an Attack Surface Validation & Exposure Engineer to help protect EY’s digital assets. You will design automated attack-path discovery, build scalable vulnerability detection, and work with security teams to reveal and remediate exposures.

The role blends strategic thinking with hands-on engineering, requiring strong communication with senior leaders and partners across Red Team, Threat Detection, and VM to strengthen EY’s security posture.