About this role

This role involves leading enterprise attack surface and infrastructure vulnerability management programs, driving modernization, and building strategic security capabilities across cloud and on-premises environments.

Key Responsibilities

Define security strategy
Lead attack surface reduction
Oversee vulnerability lifecycle
Partner with engineering and legal
Translate technical risk into executive insights

Technical Overview

The role requires expertise in vulnerability management, attack surface reduction, cloud security, offensive security, and security automation, with a focus on risk-based approaches and strategic security planning.

Ideal Candidate

The ideal candidate is a senior cybersecurity professional with over 10 years of experience in vulnerability and attack surface management, strong leadership skills, and expertise in cloud and infrastructure security. They should be strategic thinkers capable of building modern, automated security programs.

Must-Have Skills

10+ years of experience in cybersecurityVulnerability managementAttack surface managementCloud platformsRisk-based vulnerability managementOffensive security experience

Nice-to-Have Skills

AI-enabled securitySecurity automationSecurity strategy developmentExploitability assessment

Tools & Platforms

Cloud platformsSecurity toolsVulnerability scanners

Required Skills

Vulnerability ManagementAttack Surface ManagementInfrastructure SecurityCloud PlatformsRisk-based Vulnerability ManagementOffensive SecurityAI-enabled SecuritySecurity AutomationSecurity StrategyExploitabilitySecurity LifecyclePenetration TestingCybersecuritySecurity PostureRisk Reduction

Hard Skills

Vulnerability ManagementAttack Surface ManagementInfrastructure SecurityCloud PlatformsRisk-based Vulnerability ManagementOffensive SecurityAI-enabled SecuritySecurity StrategyExploitabilitySecurity Automation

Soft Skills

LeadershipStrategic ThinkingCommunicationCollaborationProblem-solvingInfluenceDecision-making

Industry & Role

Industry Healthcare IT

Job Function Leading enterprise cybersecurity vulnerability and attack surface management programs

Role Subtype Cybersecurity

Tech Domains Cybersecurity

Keywords for Your Resume

Vulnerability ManagementAttack Surface ManagementInfrastructure SecurityCloud PlatformsRisk-based Vulnerability ManagementOffensive SecurityAI-enabled SecuritySecurity AutomationSecurity StrategyExploitabilitySecurity LifecyclePenetration TestingCybersecuritySecurity PostureRisk Reductionattack surface managementvulnerability managementcloud securityoffensive securityrisk-based vulnerabilitypenetration testingsecurity automationsecurity strategyexploitabilitycybersecurity

Deal Breakers

Less than 10 years of cybersecurity experience, Lack of experience in vulnerability or attack surface management, No experience with cloud platforms, No leadership or program management experience

Director, Attack Surface & Infrastructure Vulnerability Management

Get matched to jobs like this