Senior Security Operations Engineer

About the role

As a Senior Security Operations Engineer – Attack Surface Management , you will help engineer, operate, and continuously improve our enterprise Attack Surface and Vulnerability Management capabilities. You will focus on discovering and understanding our attack surface, identifying vulnerabilities and exposures, prioritizing them based on real-world risk, and driving remediation across our global environment.

What you'll do

• Engineer and improve enterprise Attack Surface and Vulnerability Management across cloud, infrastructure, endpoints, applications, and internet-facing environments
• Discover and correlate assets across security platforms and identify unknown, unmanaged, stale, and externally exposed assets
• Drive risk-based vulnerability prioritization using asset criticality, exposure, exploitability, known exploitation, threat intelligence, and compensating controls
• Establish remediation workflows and SLAs and partner with asset owners to drive measurable risk reduction
• Operate and troubleshoot Zscaler ZIA/ZPA, including SSL inspection, access policies, connectivity, and Zero Trust controls

What you need

• 7–13 years in cybersecurity
• Vulnerability assessment
• SIEM
• Incident response
• Network security
• EDR
• Cloud security
• Any graduate

Good to have

• Python
• Splunk
• CISSP
• CISM
• Firewalls
• CI/CD