Senior Exposure Management Engineer – Mid-Atlantic region

🔥 6 minutes ago

🇺🇸 United States – Remote

⏰ Full Time

🟠 Senior

👷🏻‍♀️ Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 10%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.Why this score:

• Just posted.
• Jobs at this company usually fill in 21 days.
• No salary listed.

Apply Now

Find Similar Remote Jobs

GuidePoint Security

WebsiteLinkedInAll Job Openings

201 - 500 employees

💼 Consulting

🏥 Healthcare

📦 Logistics

Consulting • Healthcare • Logistics

GuidePoint Security is a cybersecurity firm offering consulting, engineering, and managed services to help organizations secure their digital assets. The company specializes in application security, cloud security, data protection, email security, threat intelligence, and identity and access management. With solutions tailored to various platforms including AWS, Microsoft, Google Cloud, and OT environments, GuidePoint Security aims to enhance cybersecurity resilience for both enterprise and government clients. They focus on integrating advanced security technologies and providing expertise in risk assessment, compliance, and security awareness education, helping clients navigate complex cybersecurity challenges and improve their security posture.

📋 Description

• Operate and maintain vulnerability management, RBVM, CAASM, and CNAPP platforms • Monitor security findings and support prioritization and remediation workflows • Tune platforms, optimize configurations, and integrate tools with client environments • Onboard assets, applications, and cloud environments into security platforms • Review exposure findings and track remediation • Manage remediation workflows with client engineering teams • Generate operational dashboards and security leadership reports • Maintain asset inventory coverage and scanning accuracy • Deploy, configure, and maintain vulnerability scanners across on-premises, cloud, and hybrid environments • Design scan sites, asset groups, templates, and schedules • Manage authenticated scanning, scan engines, and agent deployments; troubleshoot credential failures and coverage gaps • Execute and validate network, host, and web application vulnerability scans; verify findings and reduce false positives • Manage vulnerability discovery, validation, assignment, remediation, re-scan verification, and closure • Coordinate patch and configuration remediation and track risk acceptances, exceptions, and compensating controls • Perform CIS and DISA STIG configuration and compliance scanning • Maintain vulnerability management policies, SLAs, and procedures aligned with NIST, PCI DSS, and CIS Controls • Produce vulnerability metrics and reports, including aging vulnerabilities, mean time to remediate, and scan coverage • Configure RBVM prioritization based on business impact, exposure, and exploitability • Consolidate and de-duplicate findings from multiple scanners into RBVM platforms • Maintain asset criticality ratings and business-context tags • Enrich findings with threat intelligence and exploitability signals • Build queries, dynamic views, automation workflows, dashboards, and SLA escalation rules • Automate ticketing and remediation actions through ServiceNow, Jira, Axonius Query Language, REST API, and Enforcement Center • Support CNAPP operation, cloud posture monitoring, exposure analysis, and investigation of cloud misconfigurations, identity exposures, and attack paths • Develop scripts and automation to improve security workflows • Participate in client operational cadence meetings and provide updates on findings and remediation progress • Assist senior engineers with troubleshooting platform issues • Contribute to documentation and operational playbooks

🎯 Requirements

• 7+ years of experience in cybersecurity engineering • Experience with exposure management or risk-based vulnerability management • Experience building and maintaining unified asset inventories from disparate security and IT data sources • Experience configuring asset criticality, ownership, and business context for risk-based prioritization • Familiarity with vulnerability management, exposure management, or CNAPP platforms such as Tenable, Qualys, Rapid7, Wiz, Axonius, or similar tools • Hands-on experience running enterprise vulnerability scanning programs, including authenticated scanning, scan scheduling, false-positive validation, and remediation tracking • Scripting experience in Python, PowerShell, or similar • Experience working with APIs or automating workflows • Understanding of vulnerabilities, misconfigurations, identity and access control, and security monitoring • Strong communication skills and ability to work with engineering teams • Ability to embrace emerging technologies, including AI tools • Applicants must be authorized to work for any employer in the U.S.; employment visa sponsorship is unavailable • Up to 10% travel • Sedentary work • Substantial movement of the wrists, hands, and/or fingers for a minimum of 8 hours a day • Close visual acuity for computer terminal viewing and/or extensive reading for a minimum of 8 hours a day

🏖️ Benefits

• Remote workforce primarily (U.S. based only) • Group Medical Insurance options, including Zero Deductible PPO and High Deductible Health Plan with HSA • GuidePoint pays 90% of employee PPO premiums and 70% of family PPO premiums • GuidePoint pays 100% of employee HDHP premiums and 75% of family HDHP premiums • HSA contributions of $850 annually for employees or $1,750 annually for families • Group Dental Insurance; GuidePoint pays 100% of employee premiums and 75% of family premiums • 12 corporate holidays • Flexible Time Off (FTO) program • Healthy mobile phone and home internet allowance • Eligibility for retirement plan after 2 months at open enrollment • Pet Benefit Option • Collaboration, mentorship, and guidance opportunities

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume