Senior Attack Surface Management Engineer with Security Clearance

ShorePoint, Inc.; Albuquerque, Northern (NM, KY); Hybrid; USD 140,000 - 200,000; Full time

Benefits offered by this job

PTO 144 hours

11 holidays

Health insurance (85% premium covered)

401(k)

CEU reimbursement

Certification maintenance

Continuing education

Job summary

ShorePoint, Inc. is seeking a Senior Attack Surface Management Engineer in Albuquerque, NM, onsite, to identify and reduce external and internal attack surfaces across enterprise systems and applications. The role partners with threat hunting, vulnerability management and engineering teams to implement defenses and measure exposure reduction.

The ideal candidate has 10+ years of experience, a BS and possibly a postgraduate degree, and must be a U.S. citizen eligible for a security clearance.

Qualifications

• Bachelor’s degree from an accredited university; a postgraduate degree may substitute for 6 years of experience.
• 10+ years of relevant work experience.
• Applicants must be a U.S. citizen and eligible to obtain and maintain a security clearance.

Responsibilities

• Identify and assess attack surface exposure across systems, services, assets and externally reachable resources.
• Support risk assessments and help prioritize remediation activities based on threat relevance, environment analysis and mission impact.
• Partner with threat hunting, vulnerability management and engineering teams to integrate threat intelligence and identify coverage gaps and exposure trends.
• Recommend and support implementation of technical controls and protections that reduce exploitability and improve resilience.
• Track exposure related findings, document relevant risks and help measure the closure of identified security gaps and detection improvements.

Skills

Attack surface management

Exposure analysis

Vulnerability prioritization

Security engineering

Analytical skills

Remediation prioritization

Documentation

Collaboration across teams

Security clearance eligibility

Education

Bachelor's degree

Postgraduate degree substitute for 6 years experience

Job description

Who we are: ShorePoint is a fast-growing, industry-recognized and award-winning cybersecurity services firm focused on high-profile, high-threat public and private sector customers who demand experience and proven security models to protect their data. We embrace a "work hard, play hard" mentality and celebrate individual and company successes. We are passionate about our mission and going above and beyond to deliver for our customers, while fostering an environment that supports creativity, accountability, mission success, critical thinking and a desire to give back to our community. The Perks: As recognized members of the Cyber Elite, we work together in partnership to defend our nation's critical infrastructure while building meaningful and exciting career development opportunities in a culture tailored to the individual's technical and professional growth. We are committed to the belief that our team members do their best work when they are happy and well cared for. In support of this philosophy, we offer a comprehensive benefits package, major carriers for healthcare providers. Highlighted benefits include 144 hours of PTO, 11 holidays, 85% of insurance premiums covered, a 401(k), continuing education, certification maintenance and reimbursement and more. Who we're looking for: We are seeking a results oriented Senior Attack Surface Management Engineer for a potential opportunity to identify, analyze and reduce cyber exposure across enterprise infrastructure, applications and connected environments. The ideal candidate will understand how to evaluate external and internal attack surfaces, prioritize exposure reduction and partner with operations and engineering teams to improve defensive posture. The Sr. Attack Surface Management Engineer role collaborates across technical teams to track exposure related findings, analyze threat relevance and support the closure of identified security gaps across Information Technology (IT) and Operational Technology (OT) assets. This is a unique opportunity to shape the growth, development and culture of an exciting and fast-growing company in the cybersecurity market. Employment for this position is dependent on the successful award of the contract.

What you'll be doing:

• Identify and assess attack surface exposure across systems, services, assets and externally reachable resources.
• Support risk assessments and help prioritize remediation activities based on threat relevance, environment analysis and mission impact.
• Partner with threat hunting, vulnerability management and engineering teams to integrate threat intelligence and identify coverage gaps and exposure trends.
• Recommend and support implementation of technical controls and protections that reduce exploitability and improve resilience.
• Contribute to security assessments, authorized defensive security exercises and gap analyses related to data coverage and detection effectiveness. (
• Track exposure related findings, document relevant risks and help measure the closure of identified security gaps and detection improvements. What you need to know:
• Experience in attack surface management, exposure analysis, vulnerability prioritization or related security engineering disciplines.
• Familiarity with how adversaries leverage weaknesses across infrastructure, identity, applications and network pathways.
• Strong analytical skills and ability to prioritize remediation based on risk.
• Experience collaborating across cyber operations, engineering and compliance teams.
• Strong documentation and reporting skills. Must have's:
• Bachelor's degree from an accredited university; a postgraduate degree from an accredited university may substitute for 6 years of experience.
• 10+ years of relevant work experience.
• Proven ability to analyze complex requirements and translate them into clear, actionable tasks and processes through critical thinking.
• Applicants must currently be a U.S. citizen and eligible to obtain and maintain a security clearance, in compliance with federal contract requirements. Beneficial to have:
• Active DOE Q or equivalent DoD Top Secret clearance.
• Where it's done:
• Onsite (Albuquerque, NM).