Security Engineer – Attack Surface Management (ASR)

The Security Engineer – Attack Surface Management (ASR) at Exegy is responsible for maturing the vulnerability management program to effectively reduce organizational risk and minimize the attack surface. The role requires end-to-end management of the vulnerability lifecycle, including discovery, prioritization, remediation tracking, and validation, with a focus on translating vulnerability data into actionable risk statements for IT and engineering teams. Additionally, the engineer collaborates closely with multiple teams to improve patching rates and secure configurations while conducting threat analysis to inform vulnerabilities prioritization and enhance security practices. Overall, success is measured by reductions in vulnerabilities, efficient remediation processes, and a demonstrable decrease in exposed attack surfaces.