[Hiring] Cyber Exposure Management Engineer @Stefanini Group

Role Description

The Exposure Management Engineer is responsible for continuously identifying, assessing, validating, and reducing the organization's cyber exposures across on-premises, cloud, and hybrid environments. This role supports both the long-term Exposure Management (CTEM) program and an initial onboarding phase as the organization integrates a new exposure management platform.

• Lead technical onboarding and configuration of the new exposure management platform.
• Coordinate data source integrations (cloud, identity, infrastructure, vulnerability scanners, etc.).
• Validate ingestion accuracy, asset correlation, and exposure signal quality across environments.
• Partner with engineering, cloud, IAM, and application teams to ensure successful rollout and operational readiness.
• Assist in defining workflows, reporting structures, and remediation processes that align with CTEM cycles.
• Document integration steps, system behavior, and operational procedures to support long term program maturity.
• Discover, map, and inventory external and internal attack surfaces across cloud, network, application, and SaaS environments.
• Identify unknown, shadow, misconfigured, or abandoned assets contributing to organizational exposure.
• Monitor asset changes and ensure continuous visibility into evolving environments.
• Prioritize remediation based on active threats, exploitability, data sensitivity, operational criticality, and compensating controls.
• Align validation and prioritization activities with CTEM cycle objectives.
• Partner with application, infrastructure, cloud, identity, and asset discovery teams to guide remediation plans.
• Track remediation progress and verify full resolution of exposures.
• Identify systemic or recurring issues and recommend long term improvements.
• Contribute to scoping CTEM cycles and defining focus areas (cloud posture, identity exposures, internet facing risks, etc.).
• Maintain standards, processes, and documentation for exposure management activities.
• Provide clear metrics and reporting to leadership on exposure trends, risk posture changes, and remediation performance.
• Support integration of exposure management activities into broader security architecture and operations.
• Partner with IAM teams to analyze privilege misuse, identity sprawl, and authentication weaknesses.

Qualifications

• Strong understanding of attack surface management, vulnerability management, cloud security, identity security, and network fundamentals.
• Experience with CTEM aligned workflows or continuous risk reduction programs.
• Ability to interpret complex exposure data and translate it into actionable insights.
• Hands on experience with exposure, vulnerability, or ASM tooling (ASM, CSPM, CIEM, VM scanners, EASM, attack path analysis tools).
• Knowledge of threat modeling, attacker techniques, and modern exploitation trends.
• Strong communication skills for interacting with technical and non-technical stakeholders.

Company Description

The Stefanini Group is a global provider of offshore, onshore and near shore outsourcing, IT digital consulting, systems integration, application, and strategic staffing services to Fortune 1000 enterprises around the world. Our presence is in countries like the Americas, Europe, Africa, and Asia, and more than four hundred clients across a broad spectrum of markets, including financial services, manufacturing, telecommunications, chemical services, technology, public sector, and utilities. Stefanini is a CMM level 5, IT consulting company with a global presence.