Senior Attack Surface & Threat Exposure Engineer

AnaVation, LLC; Reston (VA); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Medical insurance (employee & depend.

Dental insurance (company paid)

Disability insurance (company paid)

Vision insurance (company paid)

401k with match

Paid leave & holidays

Tuition reimbursement

Job summary

AnaVation, LLC is seeking a Security Infrastructure & Exposure Engineer to design, build, and scale attack surface management and threat exposure detection capabilities. You will engineer internal tools and automated pipelines to map assets, model attack paths, and eliminate security blind spots before exploitation.

Core responsibilities include architecting CAASM, modeling attack paths, integrating telemetry with IdP data, and embedding security checks into IaC/CI/CD pipelines.

Qualifications

• Active TS/SCI Clearance with CI Polygraph.
• Bachelor's degree and 8 years of related experience.
• Active certifications for IAT Level II and CSSP Infrastructure Support.
• Certifications cover CySA+, CND, GICSP, SCCP.
• Experience with CAASM tooling, network topology, and graph-based attack path analysis.
• Experience with cloud security (AWS/GCP/Azure), IaC (Terraform/OpenTofu), and CI/CD security.

Responsibilities

• Architect and maintain Continuous Asset Attack Surface Management (CAASM) solutions for real-time asset discovery.
• Map network topologies, analyze segmentation, and build automated attack path graphs.
• Integrate active/passive scanning data with IdP telemetry to identify exposed infrastructure.
• Embed automated vulnerability and exposure testing into IaC and CI/CD pipelines.
• Evaluate and harden cloud architectures against emerging exposure techniques.

Skills

Go

Rust

Python

Education

Bachelor's degree

Tools

CAASM tooling

Terraform

OpenTofu

CI/CD security tooling

Okta/Azure AD

Job description

AnaVation, LLC is seeking a Security Infrastructure & Exposure Engineer to design, build, and scale attack surface management and threat exposure detection capabilities. You will engineer internal tools and automated pipelines to map assets, model attack paths, and eliminate security blind spots before exploitation.

Core responsibilities include architecting CAASM, modeling attack paths, integrating telemetry with IdP data, and embedding security checks into IaC/CI/CD pipelines.