Leads exposure management and vulnerability management across cloud, hybrid, SaaS, applications, APIs, certificates, domains, and shadow IT. Identifies, validates, prioritizes, and reports vulnerabilities, misconfigurations, leaked data, and other cybersecurity risks. Designs and implements security solutions, supports remediation and penetration testing, integrates threat intelligence, advises on security architecture, and mentors team members. Requires advanced cybersecurity expertise, cross-functional collaboration, and knowledge of security frameworks and technologies.
Job Summary
As a member of the Exposure Management Team, the Sr. Cyber Security Engineer for Exposure Management owns complex analysis across internet-facing assets—cloud, hybrid, SaaS, domains, applications, APIs, certificates, and shadow IT—to identify, validate, and prioritize vulnerabilities, misconfigurations, leaked data, and other exposures that create a material business risk. The Specialist will operate within the existing exposure management team as a subject matter expert in vulnerability management, ensuring sound practices while designing, growing, and maintaining the external attack surface management program, contributing to vulnerability identification and remediation methodologies, supporting penetration testing practices, report generation, and more. The Specialist will be responsible for seeking out and reporting on vulnerability discoveries and classifications of new vulnerabilities as well as partnering with Threat Intelligence to incorporate current threat activity into risk prioritization. The Specialist will work directly with other security and information technology team members to develop plans for reporting and remediation of vulnerabilities across all operating systems, applications, and other internet-facing assets in the enterprise.
Essential Functions
- Designs, develops, configures, and implements solutions to address intermediate to complex technical and business issues related to cybersecurity.
- Leads efforts to assess cybersecurity risks, identify vulnerabilities, and implement advanced mitigation strategies to protect critical systems and data.
- Reviews and provides consultation on the security of technology solutions addressing intermediate to complex technical and business needs.
- Ensures technology solutions comply with organizational security standards.
- Designs and integrates new security solutions into existing or newly defined architectures and business processes.
- Serves as a subject matter expert for one or more technical solutions and provides guidance to team members.
- Performs other duties as assigned.
- Maintains regular and reliable attendance.
- Complies with all policies and standards.
Qualifications
- Bachelor's Degree in Cyber Security, Computer Science, Information Technology, or a related field; or the equivalent required
- 5-7 years of experience in cybersecurity, information technology operations, or a related field required
Knowledge, Skills and Abilities
- Advanced ability to design and implement solutions for complex, cross-functional technical challenges with minimal oversight.
- Expertise in identifying, troubleshooting, and proactively resolving advanced technical issues.
- Ability to mentor less experienced team members in technical problem-solving.
- In-depth knowledge of security principles across multiple cybersecurity domains.
- Comprehensive understanding of the systems development lifecycle and experience leading complex technical projects.
- Ability to translate complex technical concepts for non-technical audiences, including senior leaders and external stakeholders.
- Advanced written and verbal communication skills.
- Strong collaboration skills, including the ability to work across functions, balance security controls with business requirements, and build consensus.
- Familiarity with NIST 800-53, HITRUST, or similar security and compliance frameworks.
- Hands-on expertise across multiple cybersecurity domains, including endpoint protection, security information and event management, identity and access management, and cloud security.
Licenses and Certifications
- Relevant security certifications (e.g., CISSP, GIAC, or OSCP) preferred
Similar Jobs
Artificial Intelligence • Fintech • Insurance • Marketing Tech • Software • Analytics
Handle inbound calls and warm leads, consult customers on insurance needs, recommend appropriate Property and Casualty coverages, and convert prospects into policyholders. Representatives receive paid training and licensing support, work remotely, and follow a fixed schedule including one weekend day. The role requires strong communication, persuasion, organization, PC proficiency, and the ability to maintain a professional home workspace with high-speed wired internet.
Top Skills:
Cable InternetDsl InternetFiber InternetPc
Artificial Intelligence • Fintech • Insurance • Marketing Tech • Software • Analytics
Handle inbound calls and warm leads, consult customers on insurance needs, recommend appropriate coverage and products, and convert prospects into policyholders. The role includes paid training and Property and Casualty licensing, with no cold calling. Representatives must work a set weekday and weekend schedule, maintain a professional home workspace, and use wired high-speed internet. Strong communication, persuasion, organization, analytical, typing, and PC skills are required.
Top Skills:
PcWired High-Speed Internet
Cloud • eCommerce • Information Technology • Professional Services • Software
Manage multiple customer-facing technology implementation projects from kickoff through closure. Own delivery outcomes while coordinating customers, implementation engineers, executives, and cross-functional teams. Oversee scope, schedules, budgets, risks, quality, forecasting, and resource management. Lead planning sessions and delivery meetings, communicate project status, and help improve PMO best practices. The role focuses on cloud-based, integration-oriented solutions, with EDI, MFT, data movement, or file transfer experience preferred.
Top Skills:
Cloud TechnologyData MovementEdiFile Transfer TechnologiesMftProject Portfolio Management (Ppm) Software
What you need to know about the Colorado Tech Scene
With a business-friendly climate and research universities like CU Boulder and Colorado State, Colorado has made a name for itself as a startup ecosystem. The state boasts a skilled workforce and high quality of life thanks to its affordable housing, vibrant cultural scene and unparalleled opportunities for outdoor recreation. Colorado is also home to the National Renewable Energy Laboratory, helping cement its status as a hub for renewable energy innovation.
Key Facts About Colorado Tech
- Number of Tech Workers: 260,000; 8.5% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Lockheed Martin, Century Link, Comcast, BAE Systems, Level 3
- Key Industries: Software, artificial intelligence, aerospace, e-commerce, fintech, healthtech
- Funding Landscape: $4.9 billion in VC funding in 2024 (Pitchbook)
- Notable Investors: Access Venture Partners, Ridgeline Ventures, Techstars, Blackhorn Ventures
- Research Centers and Universities: Colorado School of Mines, University of Colorado Boulder, University of Denver, Colorado State University, Mesa Laboratory, Space Science Institute, National Center for Atmospheric Research, National Renewable Energy Laboratory, Gottlieb Institute
