[Hiring] Cybersecurity Engineer @Iconma Portal

Role Description

The Cybersecurity Engineer (Attack Surface Management) is responsible for designing, implementing, and maturing advanced security validation capabilities to safeguard enterprise systems and applications.

This role focuses on continuous security validation through External Attack Surface Management (EASM) tools, integration with existing security infrastructure, and providing actionable insights to strengthen the firm’s cyber resilience.

The engineer partners with cross-functional teams to:

• Simulate real-world adversarial tactics, techniques, and procedures (TTPs)
• Evaluate control effectiveness
• Recommend enhancements that align with enterprise risk management and regulatory standards

Qualifications

• Offsec (Offensive Security, Red team, network, web app)
• Detection Engineering (Splunk, CS NG-SIEM, Azure Sentinel)
• Python (scripting)
• Experience with Breach and Attack (BAS) or Continuous Security Validation (CSV) tool(s)
• Hands-on experience with architecting, maturing, and automation - CI/CD pipeline end to end lifecycle
• Experience with penetration testing, vulnerability management, and security tools
• Proficiency in scripting for automation, data wrangling and enrichment (e.g., Python, PowerShell)

Requirements

• Dev/appsec experience
• Networking/cloud
• IR/SOC

Benefits

• Health Benefits
• Referral Program
• Excellent growth and advancement opportunities