Description

You will build and operate the core Attack Surface Management and Secrets Detection program, integrating asset discovery, vulnerability visibility, and remediation into scalable workflows.

This role is on-site.

Responsibilities

• Maintain a real-time, trustworthy asset inventory across on-prem, cloud, and SaaS environments.
• Build and run secrets detection workflows across source code, CI/CD, and production telemetry.
• Deploy, tune, and maintain secrets detection tools like TruffleHog and GitLeaks.
• Integrate secrets scanning into CI/CD pipelines and correlate asset inventory with telemetry to drive prioritization.
• Automate triage workflows, false positive suppression, and remediation notifications via Jira or ServiceNow.

Required Skills

• 5+ years of experience in security operations, cloud security, or related engineering roles.
• Experience operating tools like RunZero, TruffleHog, and GitLeaks.
• Familiarity with cloud platforms including AWS, GCP, and Azure.
• Working knowledge of GitHub and GitLab, and secure code practices.
• Solid scripting or automation ability using Python or Bash.
• Experience managing asset metadata and tagging strategies.
• Strong understanding of secrets hygiene, credential lifecycle, and IAM basics.
• Experience supporting vulnerability management workflows.
• Ability to communicate clearly across technical and non-technical audiences.

Preferred Skills

• Experience with ServiceNow for ticketing and remediation tracking.
• Knowledge of SaaS security posture management.

Key Skills

Education

Any Graduate