Exposure Management Engineer - Northeast region (Remote)

3 months ago
Full-time
Mid Level
DevOps and Infrastructure
GuidePoint Security

GuidePoint Security

GuidePoint Security is a trusted cybersecurity consulting firm that provides expertise, solutions, and services to help organizations make informed decisions and minimize risks. Their elite team of experts offers holistic perspectives on cybersecurity,...

Internet Software & Services
251-1K
Founded 2011

Description

  • Operate and maintain security platforms including vulnerability management, CAASM, and CNAPP tools.
  • Monitor security findings and support prioritization and remediation workflows.
  • Tune platform configurations and support integrations with client environments.
  • Onboard new assets, applications, and cloud environments into security platforms.
  • Review exposure findings and track remediation progress with client engineering teams.
  • Generate operational dashboards and reporting for security leadership.
  • Maintain asset inventory coverage and scanning accuracy.
  • Develop scripts and automation to improve security workflows and reduce manual effort.
  • Build integrations between security tools and ticketing systems.
  • Participate in client meetings, provide status updates, and contribute to documentation and playbooks.

Requirements

  • 3+ years of experience in cybersecurity engineering.
  • Experience in exposure management or risk-based vulnerability management.
  • Familiarity with vulnerability management, exposure management, or CNAPP platforms such as Tenable, Qualys, Rapid7, Wiz, Axonius, or similar tools.
  • Scripting experience with Python, PowerShell, or similar languages.
  • Experience working with APIs or automating workflows.
  • Understanding of security fundamentals including vulnerabilities, misconfigurations, identity and access control, and security monitoring.
  • Strong communication skills and ability to work with engineering teams.
  • Experience with CNAPP platforms such as Wiz, Prisma Cloud, Orca, or Lacework is preferred.
  • Experience with cloud platforms including AWS, Azure, or GCP is preferred.
  • Familiarity with container security and Kubernetes is preferred.
  • Experience integrating security tools with Jira or ServiceNow is preferred.
  • Experience using AI-assisted tools such as LLMs, copilots, or agent frameworks to support scripting and security operations is preferred.

Benefits

  • Remote workforce primarily, U.S.-based only.
  • Group medical insurance options with substantial employer premium contributions.
  • Group dental insurance with employer premium contributions.
  • 12 corporate holidays and a Flexible Time Off (FTO) program.
  • Healthy mobile phone and home internet allowance.
  • Eligibility for a retirement plan after 2 months at open enrollment.
  • Pet benefit option.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Quantum Computing / Cryptography Engineer

MKS2 Technologies 51-250 Internet Software & Services

MKS2 Technologies is seeking a remote Quantum Computing / Cryptography Engineer to support a federal program by advancing cryptographic modernization, quantum readiness, and post-quantum security migration planning.

C++ Cybersecurity Encryption Java Python
16 hours, 56 minutes ago

Cybersecurity Research Assistant

Axle Informatics 51-250 Pharmaceuticals

Axle is seeking a remote Cybersecurity Research Assistant in the United States to support rare disease research at NIH by implementing and monitoring security controls across Kubernetes, Linux, database, and high-performance computing environments.

Ansible Bash Cybersecurity DNS Elasticsearch Git Grafana Kubernetes Linux LLM Prometheus Python RHEL Secrets Management TCP/IP Terraform TLS Ubuntu
17 hours, 11 minutes ago

Cyber Security Engineer (R-00206)

True Zero Technologies 11-50 Internet Software & Services

True Zero Technologies is seeking Cybersecurity Engineers to support enterprise Zero Trust implementation by integrating security capabilities, validating controls, and producing technical evidence for authorization activities.

Cybersecurity Network Security
17 hours, 41 minutes ago

Zero Trust Engineer (R-00205)

True Zero Technologies 11-50 Internet Software & Services

True Zero Technologies is seeking Zero Trust Engineers to implement enterprise Zero Trust use cases across prioritized Department of Veterans Affairs information systems and guide them through planning, validation, testing, and operational transition.

Azure Cybersecurity
1 day, 16 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers