This is a fully remote position, open to applicants in Brazil.

📋 Description

• Take charge of the ASM/EASM/CAASM capabilities, which include discovery, attribution, asset ownership, risk prioritization, and cross-functional remediation.

• Develop and enhance the ASM strategy, integrating it into the CTEM framework.

• Design the ASM operating model, incorporating outside-in discovery, attribution, asset-ownership workflows, and risk prioritization.

• Engineer and automate the correlation and enrichment of discovery using APIs and scripting across EASM/CAASM, DNS, certificate transparency, and CMDB sources.

• Create integration blueprints that link asset visibility to vulnerability, threat intelligence, and remediation platforms.

• Develop sustainability and governance models that address ownership assignment, remediation SLAs, and external hygiene control checks.

• Operate independently to facilitate remediation efforts across teams responsible for their assets.

⛳️ Requirements

• A Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related field.

• 7–9 years of substantial cybersecurity experience, ideally concentrating on attack surface management, exposure management, or offensive/recon security.

• Proven experience in leading or managing enterprise ASM/EASM/CAASM discovery, attribution, and remediation governance across internet-facing, cloud, and third-party surfaces.

• Practical experience with ASM platforms and reconnaissance tools such as Cortex Xpanse, Defender EASM, CyCognito, Censys, or Shodan.

• Understanding of internet fundamentals, including TCP/IP, DNS, TLS/certificates, and domains.

• Demonstrated ability to drive asset ownership and remediation independently across infrastructure, cloud, and third-party teams.

• Experience in reporting external risks to stakeholders.