Description

Responsibilities

• Design and manage Vulnerability Exposure Management and External Attack Surface Management programs.
• Identify security risks across cloud infrastructure, DNS, SMTP, TLS certificates, and SaaS platforms.
• Monitor threat intelligence, dark web activities, and external vulnerabilities.
• Perform security assessments and vulnerability scanning.
• Evaluate and reduce security risks across enterprise environments.
• Define security standards and recommend security architecture improvements.
• Work with cross-functional teams to implement security solutions.
• Communicate security risks and recommendations to technical teams and senior management.
• Use approved AI tools to improve security analysis, documentation, and productivity.

Required Skills

• Security Architecture
• Vulnerability Exposure Management
• External Attack Surface Management (EASM)
• Enterprise Security
• Cloud Security
• DNS, SMTP, and TLS
• SaaS Security
• Threat Intelligence
• Dark Web Monitoring
• Vulnerability Scanning
• Email Security
• Proofpoint
• Security Risk Management
• Stakeholder Management

Experience & Qualifications

• 8+ years of experience in Security Architecture, Enterprise Security, or Platform Security.
• Experience managing Vulnerability Exposure Management and External Attack Surface Management programs.
• Strong understanding of internet-facing infrastructure, cloud security, DNS, SMTP, TLS certificates, and SaaS environments.
• Knowledge of threat actor reconnaissance and exploitation techniques.
• Experience with threat intelligence, dark web monitoring, and vulnerability scanning.
• Experience with email security platforms such as Proofpoint.
• Associate's degree in Computer Science, Information Security, Engineering, or equivalent practical experience.
• Strong communication and stakeholder management skills.
• Ability to explain complex security concepts to technical and executive teams.

Preferred Skills

• Healthcare or other highly regulated industry experience.
• Hands-on or architectural experience with:
• Proofpoint
• Bright
• Xpanse
• Tenable
• Splunk or similar SIEM tools
• Knowledge of HIPAA, NIST, ISO, and SOC compliance frameworks.
• Experience advising leadership on security risks and priorities.
• Experience mentoring security engineering or architecture teams.
• Experience using AI tools such as GitHub Copilot and Microsoft 365 Copilot.
• Expected to use approved AI tools at least 90% of the working week

Key Skills

Education

Bachelor's degree