Jobs in the United States

25+ jobs

Save this search

Added 11 hours ago
G1
Senior Offensive Security Engineer
Group 1001 Resources, LLC
Remote, United States
- $200,000 to $270,000 USD / year
Group 1001 is seeking a hands-on Senior Offensive Security Engineer to lead penetration testing and red team operations across our cloud, endpoint, application, and API environments. You…
Added 15 hours ago
Cyber Security Analyst/Engineer
First Horizon Bank
RALEIGH, NC · MEMPHIS, TN · Raleigh, NC · Memphis, TN
- 1–3 years of hands-on experience in one or more of the following: vulnerability management, application security testing (SAST/DAST), or penetration testing for web/mobile/API.
Added 1 day ago
IT Security Engineer
CoolSys
UNAVAILABLE
We are seeking a mid-level Security Engineer to support security operations across a geographically distributed, multi-architecture environment. This role is intended for an engineer with 4…
Added 1 day ago
AT
Information Security Solutions Engineer II
Auto Truck Group LLC
Trenton, NJ
- $105,050 to $149,700 USD / year
Holman is looking for a Security Engineer to work where cloud infrastructure and software development meet. You will review and design security architecture for our cloud environments,…
Added 1 day ago
Senior Software Engineer - Database Automation and Platform Engineering
PNC Bank NA
PA · Strongsville, OH · Birmingham, AL · Dallas, TX
As a Senior Software Engineer, you will play a key role in designing, developing, and maintaining automation solutions that support enterprise database platforms. This position combines…
Added 1 day ago
UG
Principal Cybersecurity Analyst (Attack Surface Mgt.) On Site MN
UnitedHealth Group
Columbia, MD
- $112,700 to $193,200 USD / year
…(ASM) team within Optum Technology's Enterprise Information Security organization, you will provide senior technical leadership to protect our global enterprise against emerging digital…
Added 1 day ago
HB
Front End Software Engineer
HIGH BRIDGE CONSULTING LLC
Vienna, VA
- $100,000 to $140,000 USD / year
Secure software development practices, including input validation, dependency and vulnerability management, secrets handling, secure coding review, and remediation of security findings.
Added 1 day ago
Full Stack Engineer
ewminds consulting Services
Clairton, PA
· Solid understanding of application security, secrets management, IAM, and vulnerability management
Added 1 day ago
Sr Technical Success Manager
Black Duck Software, Inc.
United States
…without a known answer. You partner with a Customer Success Engineer (CSE) when the work requires custom code, CI/CD or API integration builds, or architecture judgment specific to the…
Added 1 day ago
Lead Technical Success Manager
Black Duck Software, Inc.
United States
…without a known answer. You partner with a Customer Success Engineer (CSE) when the work requires custom code, CI/CD or API integration builds, or architecture judgment specific to the…
Added 1 day ago
Sr. Support Development Engineer (Remote)
Inspira Financial
Oak Brook, IL
The Sr. Support Development Engineer supports, maintains, and improves business critical React applications hosted in Microsoft Azure. The role combines production support with development…
Added 1 day ago
O
Lead Principal Application Software Engineer
Oracle
Nashville, TN
- $104,600 to $264,100 USD / year
Partner with security teams and technical leaders on secure development practices and automated vulnerability checks. Lead vulnerability remediation, application upgrades, patching, and…
Added 1 day ago
Pentesting Engineer
Bechtel Corporation
Glendale, AZ
…vectors. Standard toolkit: commercial and open-source offensive security tooling covering web application testing, network assessment, exploitation, and cloud security; CTEM-stack tooling…
Added 1 day ago
Pentesting Engineer
Bechtel
Glendale, AZ
…vectors. Standard toolkit: commercial and open-source offensive security tooling covering web application testing, network assessment, exploitation, and cloud security; CTEM-stack tooling…
Added 1 day ago
Systems Engineer
MBI - Malibu Boats, Inc
Loudon, TN
Partner with the security team to implement and maintain security controls, hardening baselines (CIS, Microsoft Secure Score), vulnerability remediation, and audit and regulatory compliance…
Added 1 day ago
Systems Engineer
Malibu Boats, LLC
Loudon, TN
Partner with the security team to implement and maintain security controls, hardening baselines (CIS, Microsoft Secure Score), vulnerability remediation, and audit and regulatory compliance…
Added 2 days ago
EE
IT Specialist (Systems Analysis/Applications Software)
Equal Employment Opportunity Commission
Washington, DC
- $143,913 to $187,093 USD / year
…including Azure Kubernetes Service (AKS), Azure App Service, Azure API Management, Key Vault, Azure Monitor, and cloud-native services supporting applications. | Leads the design,…
Added 2 days ago
O
Principal Application Software Engineer, Java & Cloud
Oracle
Jefferson City, MO
- $99,600 to $209,500 USD / year
+ Support application maintenance, testing, upgrades, patches, and vulnerability remediation.
Added 2 days ago
A
Senior Cloud & Application Security Engineer
AXON-Networks
Irvine, CA
- $150,000 to $220,000 USD / year
The Senior Cloud & Application Security Engineer is the primary hands-on technical security engineer within AXON's Information Security organization.
Added 2 days ago
Software Engineering Lead and Application Architect - TS/SCI with Polygraph
GD Information Technology, Inc.
United States
Manage technical debt, architecture drift, defect trends, test coverage, vulnerability remediation, performance, and reliability improvement.
Added 2 days ago
Senior/Principal Software Solutions Architect - Data Integration Framework, Hybrid
Sandia National Laboratories
Albuquerque, NM
Working knowledge of software security principles, vulnerability assessment, remediation, and risk communication.
Added 2 days ago
Software Developer
Koniag Government Services
Huntsville, AL
KGS is currently seeking an accomplished Senior Full Stack Software Engineer/Developer to spearhead the engineering, enhancement, and architectural modernization of core Line of Business…
Added 2 days ago
Zscaler Integration Engineer - Mid
Koniag Government Services
Washington, DC
Koniag Operations Services, LLC, a Koniag Government Services company, is seeking an experienced Zscaler Integration Engineer (Mid) to support enterprise network security operations and IT…
Added 2 days ago
Palo Alto Integration Engineer - Mid
Koniag Government Services
Washington, DC
…Services company, is seeking an experienced Palo Alto Integration Engineer (Mid) to support enterprise network security operations and IT administrative and operational support services for…
Added 2 days ago
Harness/Traceable Integration Engineer (Senior)
Koniag Government Services
Washington, DC
…company, is seeking an experienced Harness/Traceable Integration Engineer (Senior) to support enterprise DevSecOps operations, API security, and IT administrative and operational support…

Relativity ODA LLC

Advanced Security Engineer - Exposure Management

IL, United States

Apply About employer

Applications open in a new tab.

Job details

Experience: 2-6 years of hands-on experience in vulnerability management, exposure management, attack surface management, cloud security, or a related security engineering discipline.
Posting language: English
Posted: Nov 2, 2026

Original job description

Posting Type Hybrid/Remote

Job Overview The Advanced Security Engineer is a technically deep, hands-on practitioner who strengthens the organization’s Exposure Management capability. This role identifies and contextualizes vulnerabilities, misconfigurations, unmanaged assets, and container and API posture risks across the technology estate; correlates findings with asset criticality, exploitability, compensating controls, internet exposure, and threat intelligence; and translates them into a prioritized, continuously updated view of the exposures that matter most. Working closely with engineering and department leaders, Governance Risk Intelligence, Product Security Enablement, Adaptive Security, the Purple Team, Threat Detection & Response, and application and service owners, this engineer improves discovery and context coverage, makes residual risk and exposure aging visible, and coordinates reduction campaigns that help owning teams act on the highest-priority exposures. The role drives prioritization, reporting, and remediation follow-through while leaving risk-acceptance decisions, policy setting, and remediation execution with the accountable teams.

Job Description and Requirements Exposure & Attack Surface Discovery

Operate and optimize exposure and external attack-surface discovery capabilities to identify internet-facing, unmanaged, shadow, and newly introduced assets across the technology estate.
Reconcile discovery results with authoritative asset inventories and ownership data, investigate coverage gaps, and improve attribution of assets to the responsible application, service, or department.
Develop repeatable workflows and automation that reduce discovery latency and increase coverage, data quality, and visibility across relevant asset classes.

Vulnerability & Misconfiguration Prioritization

Analyze vulnerabilities and misconfigurations from exposure management and partner-team data sources, correlating findings with exploitability, asset criticality, internet exposure, compensating controls, and available threat intelligence.
Design, tune, and document contextual prioritization logic that moves decision-making beyond raw severity scores and produces a defensible, risk-ranked exposure backlog.
Perform detailed exposure analysis for high-impact vulnerabilities, zero-days, and material misconfigurations, and communicate why an exposure matters to technical and non-technical stakeholders.
Partner with the Purple Team and other security functions to validate prioritization assumptions and improve correlation between top-priority exposures and confirmed exploitability.

Container & API Runtime Posture

Maintain an accurate inventory and standing risk view of live containers and APIs, including running-image risk, workload ownership, API posture, and relevant production context.
Correlate build- and deployment-time findings received from Adaptive Security with production runtime context to determine whether identified risks remain relevant once workloads are live.
Identify systemic container and API posture issues and develop prioritized remediation campaigns for application- and service-owning teams.

Threat Intelligence Integration

Integrate external and internal threat intelligence into exposure scoring and prioritization, including active exploitation, adversary behavior, and emerging-vulnerability signals.
Maintain awareness of changes in the threat landscape and assess their relevance to the organization’s exposed technologies, assets, containers, and APIs.
Produce timely, actionable notifications when new intelligence materially changes the likelihood or priority of an existing exposure.

Residual Risk Visibility & Reporting

Build and maintain dashboards, reporting, and data pipelines that show residual exposure risk by department, asset class, severity tier, ownership, and age.
Define and monitor measures such as discovery coverage, context coverage, exposure aging, reduction rate, and residual-risk trend; investigate data-quality or performance issues that affect reporting trustworthiness.
Translate complex exposure data into clear technical findings, trends, and recommended actions for engineering leadership, department leaders, Governance Risk Intelligence, and service-owning teams.

Exposure Reduction Coordination

Track high-priority exposures against expected remediation timelines, identify aging and overdue items, and coordinate follow-through with accountable application- and service-owning teams.
Plan and run targeted exposure-reduction campaigns, establish measurable outcomes, and report progress, blockers, and residual risk to relevant stakeholders.
Route exposures requiring risk-acceptance guidance to the owning team and Governance Risk Intelligence, and route findings requiring manual review, threat modeling, or adversary validation to the appropriate security function.
Provide technical guidance and prioritization context without assuming ownership of risk acceptance, policy decisions, or remediation execution.

Minimum Qualifications:

2-6 years of hands-on experience in vulnerability management, exposure management, attack surface management, cloud security, or a related security engineering discipline.
Hands-on experience with vulnerability scanning, exposure management, or attack surface management platforms and the analysis of vulnerabilities, misconfigurations, unmanaged assets, and security posture findings.
Experience prioritizing exposures using factors such as exploitability, asset criticality, internet exposure, threat intelligence, compensating controls, and business context, not severity scores alone.
Working knowledge of common enterprise and cloud technologies, including operating systems, networks, containers, APIs, and at least one major cloud platform.
Familiarity with vulnerability and security frameworks and sources such as CVSS, CISA KEV, EPSS, NIST, MITRE ATT&CK, and CIS benchmarks.
Proficiency in at least one scripting or automation language, such as Python, Bash, or PowerShell, used to integrate security data, automate analysis, or improve exposure-management workflows.
Ability to investigate complex exposure data, identify systemic risk patterns, and clearly communicate prioritized findings and recommended actions to technical and non-technical stakeholders.

Preferred Qualifications:

Bachelor’s degree in Computer Science, Cybersecurity, Information Security, or a related field, or equivalent practical experience.
Hands-on experience assessing exposure across multi-cloud or cloud-native environments.
Experience with enterprise vulnerability management, exposure management, attack-surface management, or adjacent platforms.
Familiarity with AI-enabled SecOps (e.g., ML-based risk prioritization, or AI-assisted workflows)
Basic knowledge of common cloud environments such as AWS, Azure, or GCP.
Experience developing dashboards, metrics, or data pipelines.
Experience supporting compliance and audit requirements (SOC 2, ISO 27001, FedRAMP) from a technical control perspective.
Relevant certifications such as CC, SEC+, CySA+, or equivalent

Relativity is committed to competitive, fair, and equitable compensation practices.

This position is eligible for total compensation which includes a competitive base salary, an annual performance bonus, and long-term incentives.

The expected salary range for this role is between following values:

$104,000 and $156,000 The final offered salary will be based on several factors, including but not limited to the candidate's depth of experience, skill set, qualifications, and internal pay equity. Hiring at the top end of the range would not be typical, to allow for future meaningful salary growth in this position.

Required Skills:

Endpoint Security, Network Security, Penetration Testing, Security Architecture Design, Security Automation, Security Information, Security Information and Event Management (SIEM), Security Operations, Threat Modeling, Vulnerability Management

Apply About employer

Report this job