Exposure Management Architect

Now Hiring: Senior Information Security Analyst | CST Location: CST Time Zone candidates only Employment: W2 Contract-to-Hire Key Responsibilities:

• Lead vulnerability management, prioritization, remediation tracking, and reporting
• Reduce vulnerability aging, backlog, and overall security exposure
• Monitor and report exposure to CISA Known Exploited Vulnerabilities (KEV)
• Support security risk governance, exceptions, risk acceptance, and compensating controls
• Evaluate security controls across cloud, identity, endpoint, data, and application environments
• Support security architecture, threat modeling, DevSecOps, IAM/PAM, and third-party risk reviews
• Provide audit, compliance, regulatory, and due diligence support
• Build security dashboards, metrics, executive summaries, and risk reports

Must-Have / Preferred Technical Skills:

• Microsoft Defender: Endpoint, Identity, Office 365, Cloud
• Microsoft Sentinel & Microsoft Purview
• Microsoft Entra ID
• Qualys
• ServiceNow: ITSM, CMDB, IRM, Vulnerability Response
• Azure strong experience
• AWS working knowledge
• Splunk
• SonarQube
• Power BI & Power Automate
• Vulnerability Management / DLP / Cloud Security
• CIS Controls & SOC 2 Experience

Experience: 7-12 years of progressive Information Security experience. Strong background in vulnerability management, security operations, cloud security, GRC, compliance, and audit support. Bachelor's degree in Cybersecurity, IT, Computer Science, or related field preferred. CISSP, CCSP, SSCP, GCED or similar certifications are a plus.



Key Focus Areas: Timely vulnerability remediation | Reduction of vulnerability aging & backlog | Overall vulnerability reduction | CISA KEV exposure monitoring | Security risk metrics & reporting | Audit readiness | Control effectiveness

For applications and inquiries, contact:View email address on us.fitly.work