Senior Attack Surface & Exposure Validation Engineer

EY; Dallas (TX); On-site; USD 140,000 - 180,000; Full time

Job summary

EY is seeking a senior Attack Surface Validation & Exposure Engineer in Dallas, TX, to advance the Vulnerability Management and Exposure Assessment capability. You will help discover vulnerabilities at scale, validate exposure, and collaborate across Red Team and Threat Intelligence to reduce EY’s attack surface.

You will design automated discovery, build pipelines, and develop safe exploitation workflows while partnering with security teams to operationalize offensive validation and deliver

Qualifications

• 8+ years of experience in vulnerability management, exposure management, offensive security, and security engineering.
• Experience analyzing vulnerability and security posture data.
• Deep understanding of attack paths, misconfigurations, and control failures that lead to material risk.
• Ability to build scalable solutions to vulnerability and exposure challenges.

Responsibilities

• Design and engineer automated attack-path discovery and validation capabilities.
• Build scalable vulnerability detection and verification pipelines with enterprise scanning sources and custom validation logic.
• Develop controlled exploitation and exploit-chaining workflows to demonstrate attacker outcomes.
• Operationalize continuous offensive validation with testing routines that run with minimal prompting.
• Fuse Vulnerability Intelligence with Cyber Threat Intelligence to guide detection and prioritization.
• Produce reproducible evidence, attack-path narratives, severity rationale, and remediation recommendations.

Skills

Vulnerability management

Offensive security

Security engineering

Analytical thinking

Tools

Enterprise scanners

Threat intelligence platforms

Job description

EY is seeking a senior Attack Surface Validation & Exposure Engineer in Dallas, TX, to advance the Vulnerability Management and Exposure Assessment capability. You will help discover vulnerabilities at scale, validate exposure, and collaborate across Red Team and Threat Intelligence to reduce EY’s attack surface.

You will design automated discovery, build pipelines, and develop safe exploitation workflows while partnering with security teams to operationalize offensive validation and deliver