[Hiring] Global Lead, Attack Surface Management @Danaher Corporation

Role Description

At Danaher, the Global Lead, Attack Surface Management owns the ASM/EASM/CAASM capability — discovery, attribution, asset ownership, risk prioritization, and cross-functional remediation across internet-facing, internal, cloud, SaaS, subsidiary, and third-party surfaces. Enterprise strategy is set by leadership; the Global Lead shapes and refines the ASM strategy, then owns operationalizing it as part of CTEM. The Global Lead works independently and drives remediation across teams that each own their own assets.

This position reports to the Senior Manager, Exposure Management (CTEM) and is part of the Danaher Information Security (DIS) located in Brazil and will be a remote role.

In this role, you will have the opportunity to:

• Architect the ASM operating model: outside-in discovery, attribution, asset-ownership workflows, and risk prioritization feeding CTEM.
• Engineer/automate discovery correlation and enrichment (APIs, scripting) across EASM/CAASM, DNS, certificate transparency, and CMDB sources.
• Design integration blueprints connecting asset visibility to vulnerability, threat intel, and remediation platforms.
• Design the sustainability & governance model: ownership assignment, remediation SLAs, and external-hygiene control checks.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or related field.
• Extensive cybersecurity experience (7-9 years preferably) with a focus on attack surface management, exposure management, or offensive/recon security (GCRF P4 Bachelor's-track minimum; recommended, pending Comp sign-off).
• Experience leading or operating enterprise ASM/EASM/CAASM discovery, attribution, and remediation governance across internet-facing, cloud, and third-party surfaces.
• Hands-on experience with ASM platforms and reconnaissance tooling (such as Cortex Xpanse, Defender EASM, CyCognito, Censys, or Shodan) and internet fundamentals (TCP/IP, DNS, TLS/certificates, domains).
• Experience working independently to drive asset ownership and remediation across infrastructure, cloud, and third-party teams and reporting external risk to stakeholders.

Requirements

• It would be a plus if you also possess previous experience in:
• Experience with digital risk protection or M&A/subsidiary security integration.
• Scripting for API integration and automation (Python preferred).
• CISSP, CISM, OSCP, CRTO, GCIH, GIAC (GOSI/GPEN/GSEC), or a vendor ASM/CAASM certification.

Benefits

• Join our winning team today. Together, we’ll accelerate the real-life impact of tomorrow’s science and technology.
• We partner with customers across the globe to help them solve their most complex challenges, architecting solutions that bring the power of science to life.