Attack Surface Management Service Lead Consultant - Exposure Intelligence Team

This position is listed on behalf of a partner company, which manages all applications and next steps. Our partner is looking for an Attack Surface Management Service Lead Consultant – Exposure Intelligence Team based in the United States. This is an exciting opportunity for a cybersecurity professional to shape and establish an enterprise-wide Attack Surface Management (ASM) capability within a growing exposure management function. You will lead efforts to discover, monitor, and govern internet-facing assets, identifying unknown systems, external vulnerabilities, and potential entry points that could expose the organization to cyber threats. By applying Continuous Threat Exposure Management (CTEM) principles, you will transform technical findings into actionable intelligence that prioritizes real-world exploitability and business risk. Working closely with security specialists, asset owners, and cross-functional teams, you will drive remediation strategies that measurably reduce the organization's external attack surface. As the founding subject matter expert in this capability, you will have the opportunity to build scalable processes, strengthen asset governance, and establish performance metrics from the ground up. This remote role is ideal for an analytical and proactive cybersecurity specialist who enjoys solving complex problems, influencing stakeholders, and advancing enterprise security practices. Accountabilities - Lead external attack surface discovery and continuous monitoring using External Attack Surface Management (EASM) platforms and vulnerability scanning tools to identify internet-facing assets, vulnerabilities, and potential security exposures. - Translate external attack surface findings into actionable exposure intelligence, prioritizing remediation based on exploitability, attack paths, and business risk rather than relying solely on traditional vulnerability severity scores.

- Identify potential attack paths originating from internet-facing assets, including exposed services, misconfigured infrastructure, expired or weak certificates, exposed administrative interfaces, and other external weaknesses. - Establish and maintain asset governance practices, including asset attribution, ownership assignment, inventory reconciliation, and the identification of shadow IT, unmanaged infrastructure, and orphaned assets. - Expand visibility across third-party environments, subsidiaries, cloud-hosted infrastructure, and other external technology footprints to improve enterprise-wide exposure awareness. - Partner with asset owners and cybersecurity teams to validate findings, develop clear remediation recommendations, coordinate mitigation activities, and verify that identified exposures have been resolved. - Collaborate with penetration testing, product security, exposure response, and other security stakeholders to operationalize findings and integrate external attack surface intelligence into broader exposure management practices. - Build and refine ASM processes, operating procedures, governance frameworks, and performance metrics to establish a sustainable capability from the ground up. - Improve the quality and reliability of external security findings by validating discovered assets, reducing false positives, and ensuring accurate risk prioritization. - Track and improve key performance indicators, including external attack surface coverage, the number of unknown or unowned assets, time from exposure discovery to ownership assignment, and time to remediation. - Communicate technical findings and risk assessments clearly to technical teams and relevant stakeholders, supporting informed decisions and accountability for remediation. - Continuously evaluate tools, methodologies, and operational practices to improve the organization's ability to identify, prioritize, and reduce exploitable external exposures.