This is a fully remote position, open to applicants in Poland.

📋 Description

• Take ownership of the ASM/EASM/CAASM capabilities, encompassing discovery, attribution, asset ownership, risk prioritization, and cross-functional remediation.

• Develop and enhance the ASM strategy and implement it as part of CTEM.

• Operate autonomously and facilitate remediation efforts among teams responsible for their assets.

• Design the ASM operating model that includes outside-in discovery, attribution, asset-ownership workflows, and risk prioritization that supports CTEM.

• Engineer and automate discovery correlation and enrichment utilizing APIs and scripting across EASM/CAASM, DNS, certificate transparency, and CMDB sources.

• Create integration blueprints that link asset visibility to vulnerability, threat intelligence, and remediation platforms.

• Establish sustainability and governance models, including ownership assignments, remediation SLAs, and external hygiene control checks.

• Report directly to the Senior Manager, Exposure Management (CTEM) within Danaher Information Security.

⛳️ Requirements

• A bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related discipline.

• Significant experience in cybersecurity, ideally 7–9 years, with a focus on attack surface management, exposure management, or offensive/recon security.

• Proven experience in leading or managing enterprise ASM/EASM/CAASM discovery, attribution, and remediation governance across internet-facing, cloud, and third-party surfaces.

• Practical experience with ASM platforms and reconnaissance tools such as Cortex Xpanse, Defender EASM, CyCognito, Censys, or Shodan.

• Strong understanding of TCP/IP, DNS, TLS/certificates, and domains.

• Ability to work independently to promote asset ownership and remediation across infrastructure, cloud, and third-party teams.

• Experience in communicating external risks to stakeholders.