Consultant, Surface Area Management

Job Purpose and Impact

The Consultant - Surface Area Management (Vulnerability Management) supports the protection of the organization's digital footprint across on-premises and cloud environments by helping identify, prioritize, and reduce security exposures. This role contributes to vulnerability management, attack surface management, cloud security posture management, and remediation initiatives through technical analysis, collaboration, and continuous improvement efforts. Working under general supervision, the Consultant partners with cybersecurity, cloud platform, infrastructure, engineering, and application teams to improve security posture, increase visibility of enterprise assets, and reduce cyber risk. This role is a professional individual contributor who applies technical expertise to support enterprise security programs and exposure reduction efforts. 

Key Accountabilities

• Support enterprise vulnerability and exposure management activities across AWS, Azure, GCP, and OCI environments.


•  Analyze CSPM and CNAPP findings and assist in prioritizing remediation based on exposure, business criticality, and risk.


• Identify and promote preventive cloud security controls, including AWS SCPs and Azure Policies by working with different technical teams


• Track remediation activities and collaborate with infrastructure, platform, and application teams to drive vulnerability resolution.


• Assist with security exception reviews, risk acceptance documentation, and remediation governance processes. • Develop and enhance dashboards, reports, automation workflows, and integrations that improve visibility, coverage, and operational efficiency.


• Support cloud identity and access security initiatives, including privileged access management, workload identities, secrets management, and least privilege practices. • Participate in investigations of critical vulnerabilities, zero-day threats, and actively exploited exposures.


• Identify recurring security issues and recommend improvements to scanning coverage, asset visibility, attack surface management, and remediation effectiveness. • Conduct cloud security assessments and security posture reviews and document recommendations for remediation.


• Prepare operational and management reporting to communicate exposure trends, remediation status, and risk metrics.


• Collaborate with Incident Response, Threat Intelligence, Security Architecture, Engineering, and Risk teams to improve security outcomes

Essential Functions

• Vulnerability Management Operations Supports the implementation, operation, and continuous improvement of enterprise vulnerability management capabilities.


• Assists in maintaining standards, processes, metrics, and reporting to reduce organizational risk.


• External Attack Surface Management Monitors and analyzes the organization's external attack surface and works with stakeholders to prioritize and remediate identified exposures.


• Threat-Informed Vulnerability Management Uses threat intelligence, exploitability indicators, and business context to assist with vulnerability prioritization and remediation activities.


• Program Execution and Continuous Improvement Participates in initiatives that improve vulnerability coverage, asset visibility, remediation effectiveness, exposure management processes, and automation capabilities.


• Stakeholder Engagement Collaborates with technical and business stakeholders to communicate findings, remediation requirements, and security recommendations.


• Cloud Posture Management Analyzes cloud posture findings, validates remediation actions, and assists in improving risk-based remediation processes. 

Qualifications

• Bachelor’s degree in computer science, Cybersecurity, Information Security, Information Systems, or a related technical field, or equivalent practical experience.


• 7+ years of cybersecurity experience, including 5+ years focused on Enterprise vulnerability management, attack surface management, exposure management on both Cloud and OnPrem.


• Desired hands-on experience in Service-Now, Tenable, Wiz, CrowdStrike Falcon.


• Working knowledge of cloud security architecture and cloud-native security controls, including network security, encryption, key management, and data protection.


• Hands-on experience using CSPM, CNAPP, or cloud security platforms such as Wiz, Prisma Cloud, CrowdStrike Falcon, AWS Security Hub, or similar solutions.


• Strong understanding of securing cloud environments in at least one major cloud platform (AWS, Azure, GCP, or OCI) with working knowledge of preferably AWS or Azure


• Experience working with cross-functional teams to coordinate vulnerability remediation, exception management, and risk reduction activities.


• Strong analytical, communication, and problem-solving skills.

Preferred Certifications

• CCSK (Certificate of Cloud Security Knowledge)


• AWS Certified Cloud Practitioner or AWS Security Specialty


• Microsoft Azure Security Engineer Associate (AZ-500)


• Google Professional Cloud Security Engineer


• CompTIA Security+


• Certified Ethical Hacker (CEH)


• CISSP (Preferred but not required)