Security Engineer II, Attack Surface Management

Security Engineer II, Attack Surface Management

The Attack Surface Management (ASM) Security Engineer reduces enterprise risk by continuously discovering assets, identifying vulnerabilities, and driving remediation across infrastructure, cloud, applications, AI and connected/medical/IoT devices. The role supports a proactive, risk-based approach to vulnerability and exposure management aligned with healthcare security best practices.

Minimum Education:

• Associate's degree - Computer Science or a related field OR the equivalent combination of experience and education that would demonstrate the capability to successfully perform the essential functions of this position.

Minimum Experience:

• 5–7+ years in vulnerability management, security engineering, or cloud/app security.
• Experience with vulnerability scanning tools and remediation workflows.
• Strong understanding of CVSS scoring and risk-based prioritization.

Key Responsibilities & Accountabilities:

• Operate continuous asset discovery and vulnerability scanning capabilities.
• Validate, prioritize, and track remediation of vulnerabilities and misconfigurations.
• Support cloud security posture management and configuration hardening.
• Assist with secure development lifecycle (SDL) activities and application risk findings.
• Coordinate medical and IoT device vulnerability remediation and compensating controls.
• Produce metrics, dashboards, and reports to support KPIs and KRIs.

Incident & RACI Expectations:

• Responsible for coordinating the remediation of non-active medical device vulnerabilities.
• Consulted during major incidents to identify root causes and remediation guidance.