Senior Attack Surface Management Lead (Remote)

SailPoint Technologies Holdings, Inc.; Northern (KY); Hybrid; USD 92,000 - 155,000; Full time

Benefits offered by this job

Health insurance

401(k) matching

Paid parental leave

Flexible vacation

Job summary

SailPoint Technologies Holdings, Inc. is seeking a highly technical Senior Attack Surface Management Analyst to lead programmatic asset discovery, threat analysis, and remediation coordination across cloud and on-prem environments.

This role is fully remote and reports to Head of Vulnerability Management. You will build automation to inventory assets, map attack paths, and drive risk-based remediation with engineering teams, leveraging BAS, MITRE ATT&CK mappings, and threat intelligence to

Qualifications

• 5+ years of progressive hands-on experience in Attack Surface Management, Vulnerability Management, Penetration Testing, Threat Intelligence, or Security Operations—with at least 1-2 years in a senior or lead capacity.
• Advanced Cloud Infrastructure Knowledge: AWS, Azure, or GCP, with IAM and cloud security postures.
• Strong Automation & API Scripting: Python, Go, or PowerShell; REST APIs to automate workflows.

Responsibilities

• Continuous discovery to inventory external-facing and internal assets across cloud and on-prem environments.
• Threat intelligence, exposure analysis, prioritization, and remediation coordination with engineering teams.
• Orchestrate BAS and autonomous pentesting to validate controls and verify fixes.

Job description

SailPoint Technologies Holdings, Inc. is seeking a highly technical Senior Attack Surface Management Analyst to lead programmatic asset discovery, threat analysis, and remediation coordination across cloud and on-prem environments.

This role is fully remote and reports to Head of Vulnerability Management. You will build automation to inventory assets, map attack paths, and drive risk-based remediation with engineering teams, leveraging BAS, MITRE ATT&CK mappings, and threat intelligence to