Description

You will build and operate the core of the Attack Surface Management (ASM) and Secrets Detection program, integrating asset discovery, vulnerability visibility, secrets scanning, and remediation into scalable workflows.

Responsibilities

• Maintain a real-time, trustworthy asset inventory across on-prem, cloud, and SaaS environments.
• Build and run secrets detection workflows across source code, CI/CD, and production telemetry.
• Deploy, tune, and maintain secrets detection tools like TruffleHog and GitLeaks.
• Integrate secrets scanning into CI/CD workflows and correlate asset inventory with telemetry to drive prioritization.
• Automate triage workflows, false positive suppression, and remediation notifications via Jira or ServiceNow.

Required Skills

• 5+ years of experience in security operations, cloud security, or related engineering roles.
• Experience operating tools like RunZero, TruffleHog, and GitLeaks.
• Familiarity with cloud platforms including AWS, GCP, and Azure.
• Working knowledge of GitHub and GitLab, and secure code practices.
• Solid scripting or automation ability using Python or Bash.
• Experience managing asset metadata and tagging strategies.
• Strong understanding of secrets hygiene, credential lifecycle, and IAM basics.
• Experience supporting vulnerability management workflows.
• Ability to communicate clearly across technical and non-technical audiences.

Key Skills

Education

Any Graduate