Security Infrastructure & Exposure Engineer

1 мес. назад

USAOnsite

gorustpythoninfrastructure-as-codeci/cd

Engineer and scale attack surface management and threat exposure detection capabilities with automated tools and pipelines.

Be Challenged and Make a Difference     In a world of technology, people make the difference. We believe if we invest in great people, then great things will happen. At , we provide unmatched value to our customers and employees through innovative solutions and an engaging culture.  Description of Task to be Performed:  The Security Infrastructure & Exposure Engineer  will   design, build, and scale our attack surface management and threat exposure detection capabilities. You will engineer internal tools and automated pipelines that proactively map assets, model attack paths, and eliminate security blind spots before they can be exploited. Core Responsibilities :   Attack Surface Management : Architect and maintain Continuous Asset Attack Sur

Clearance : Active TS/SCI Clearance with CI Polygraph 
Education & Years of Experience : Bachelor’s degree and 8 years of experience related to specific functional area.  
Certifications:  Active certifications for both IAT Level II (e.g. CompTIA Security+) and Cyber Security Service Provider (CSSP) Infrastructure Support (e.g. CompTIA Cloud+) by program onboarding date. 
The following individual certifications cover both certification requirements for this program: CompTIA Cybersecurity Analyst, CySA+; EC-Council Certified Network Defender (CND); GlAC Global Industrial Cyber Security Professional, GICSP; (ISC)2 System Security Certified Practitioner (SCCP). 
Hands-on experience and knowledge with the following:  
Asset Discovery: Proven experience with CAASM tooling and building inventory systems.
Network & Graph Modeling: Deep understanding of network topology, segmentation verification, and graph-based attack path analysis.
Scanning & Identity: Hands-on experience with active/passive network scanning and correlating data with identity registries (e.g., Okta, Azure AD).
Cloud & DevOps: Strong background in cloud security architecture (AWS, GCP, or Azure), IaC (Terraform, OpenTofu), and CI/CD security validation.

Experience leveraging advanced AI models (e.g., ChatGPT, Grok, Claude) to automate security workflows: (ChatGPT, Grok, Claude, Claude Code, Codex)
Multiple scripting and development languages
Familiarity with developer-focused AI tools like Claude Code or OpenAI Codex to accelerate engineering velocity