Jobs in the United States

25+ jobs

Save this search

Added 2 mins ago
Technical Support
CrowdStrike, Inc.
Remote, United States
As a global leader in cybersecurity, CrowdStrike protects the people, processes and technologies that drive modern organizations. Since 2011, our mission hasn’t changed - we’re here to stop…
Added 2 mins ago
CrowdStrike Platform Resident Consultant (Remote)
CrowdStrike, Inc.
Remote, United States
As a global leader in cybersecurity, CrowdStrike protects the people, processes and technologies that drive modern organizations. Since 2011, our mission hasn’t changed - we’re here to stop…
Added 5 mins ago
Senior Information System Security Engineer
ManTech
Norfolk, VA
MANTECH seeks a motivated, career and customer-oriented Senior Information System Security Engineer (ISSE) to join our team in Norfolk, VA. This is a remote position.
Added 5 mins ago
Application Engineer - DevOps & Engineering Tools
RTX Corporation
richmond, VA
We are seeking an experienced Application Engineer - DevOps & Engineering Tools to join our agile team! In this role you will deploy, administer, and support new and existing…
Added 5 mins ago
Data Engineer
BOOZ, ALLEN & HAMILTON, INC.
Fort Belvoir, VA
…critical missions? As a systems security and network security engineer, you can identify the information system security engineering needed to assess vulnerabilities and recommend the best…
Added 5 mins ago
Chief Engineer
BOOZ, ALLEN & HAMILTON, INC.
Reston, VA
…fabrics with varying security classifications. As the Chief Engineer, you will directly manage and orchestrate cross-functional engineering teams structured around core DoW-approved Zero…
Added 9 mins ago
BV
OCI Security Consultant
Bright Vision Technologies
Katy, TX
- $100,000 to $150,000 USD / year
We are seeking an experienced Oracle Cloud Security Engineer responsible for designing, implementing, and operating security controls across Oracle Cloud Infrastructure (OCI), Oracle Cloud…
Added 23 mins ago
Sr. QA Software Engineer (ISO 13485)
Prismatik
Irvine, CA
Participates in software risk management activities including cybersecurity risk by collaborating and providing feedback to software development teams.
Added 26 mins ago
Principal Cybersecurity Engineer - Enterprise Security Engineering
Workday, Inc.
GA
As a Principal Cybersecurity Engineer on the Enterprise Security Engineering team, you will serve as a senior technical authority across our corporate endpoint fleet and an architect of our…
Added 38 mins ago
Enterprise Solution Architect
TISTA Science and Technology Corporation
Remote-United States
…architecture decisions improve interoperability, data quality, cybersecurity, resiliency, maintainability, delivery velocity, and readiness for future digital…
Added 40 mins ago
Senior Information Systems Security Engineer (ISSE) II - Tucson, AZ
RTX
United States
Our cybersecurity team is seeking a Senior Information Systems Security Engineer (ISSE) II to support our team 100% onsite at our facility in Tucson, Arizona
Added 56 mins ago
Reliability Network Engineer & Cybersecurity Coordinator
North Star BlueScope Steel, LLC
Delta, OH
The Reliability Network Engineer and Cybersecurity Coordinator is responsible for the design, support, security, and lifecycle management of Operational Technology (OT) infrastructure and…
Added 56 mins ago
Network IT Project Manager
Booz Allen Hamilton_United States
Arlington, VA · Eglin AFB, FL
…careful planning. That’s why we need you, an experienced network engineer who knows how to develop the exact network the DoD needs for the Joint Reprogramming Enterprise…
Added 58 mins ago
N
Sales Engineer
NetScout
Remote, United States
- $200,000 to $220,000 USD / year
The role of the Sales Engineer is to assist the Sales team in reaching the revenue goal by providing quality pre-sales technical support and presentations focused on articulating value to…
Added 58 mins ago
N
Senior Engineer (Electrical Planning and Design), Electrical Engineering
natgridProd
Syracuse, NY
- $119,000 to $140,000 USD / year
National Grid is hiring a Senior Engineer for our Control and Integration department in Syracuse NY.
Added 59 mins ago
Director, Power Innovation
SB Energy
Redwood City, CA · San Diego, CA · Denver, CO · Phoenix, AZ · Austin, TX · San Carlos, CA
…operational, constructability, safety, code and regulatory, cybersecurity, environmental, commercial, financial, supply-chain, bankability, warranty, and implementation perspectives;…
Added 1 hour ago
BV
Connected Systems Engineer
Bright Vision Technologies
Remote, United States
- $130,000 to $180,000 USD / year
Location: 100% Remote (Only Local U.S. Candidates)
Added 1 hour ago
Network Engineer-Secret
Sunayu
Washington, DC
The Senior Network Engineer delivers mission-critical network engineering, infrastructure administration, and cyber security hardening across unclassified (NIPR) and classified (SIPR)…
Added 1 hour ago
LI
Elite Network Engineer
Logicalis, Inc.
United States
- $82,110 to $105,306 USD / year
The Elite Network Engineer is responsible for designing, deploying, managing, and troubleshooting complex network infrastructures across a diverse portfolio of business clients. The…
Added 1 hour ago
Principal Cybersecurity Engineer
Ally Bank
Detroit, MI
Work Schedule: Ally designates roles as (1) fully on-site, (2) hybrid, or (3) fully remote. Hybrid roles are generally expected to be in the office a certain number of days per week as…
Added 1 hour ago
Sr Advisory Solution Consultant - Identity Security
ServiceNow
Remote, United States
It all started when engineer Fred Luddy wrote code that automated a tedious task for his coworker, Phyllis. She cried tears of joy. That moment inspired Fred to build a company that could…
Added 1 hour ago
Lead Test Engineer
MANTECH
Stafford, VA
…that make a real impact. Dive into exciting opportunities in Cybersecurity, IT, Data Analytics and more. Propel your career forward and be part of something extraordinary. Your journey…
Added 1 hour ago
SM
Senior DevSecOps Engineer
Sprezzatura Management Consulting
Remote, United States
- $150,000 to $170,000 USD / year
Sprezzatura is seeking a Senior DevSecOps Engineer to serve as the technical security engineering lead supporting cybersecurity modernization for the Department of Veterans Affairs (VA).
Added 1 hour ago
BV
Cybersecurity Engineer – Applications
Bright Vision Technologies
Remote, United States
- $100,000 to $150,000 USD / year
Cybersecurity Engineer – Applications – Remote
Added 1 hour ago
BV
AI Governance Engineer
Bright Vision Technologies
Remote, United States
- $100,000 to $150,000 USD / year
We are seeking an AI Security Engineer to lead the design and implementation of security controls, threat models, and incident response capabilities specifically tailored to AI and machine…

Relativity ODA LLC

Advanced Security Engineer - Exposure Management

IL, United States

Apply About employer

Applications open in a new tab.

Job details

Experience: 2-6 years of hands-on experience in vulnerability management, exposure management, attack surface management, cloud security, or a related security engineering discipline.
Posting language: English
Posted: Nov 2, 2026

Original job description

Posting Type Hybrid/Remote

Job Overview The Advanced Security Engineer is a technically deep, hands-on practitioner who strengthens the organization’s Exposure Management capability. This role identifies and contextualizes vulnerabilities, misconfigurations, unmanaged assets, and container and API posture risks across the technology estate; correlates findings with asset criticality, exploitability, compensating controls, internet exposure, and threat intelligence; and translates them into a prioritized, continuously updated view of the exposures that matter most. Working closely with engineering and department leaders, Governance Risk Intelligence, Product Security Enablement, Adaptive Security, the Purple Team, Threat Detection & Response, and application and service owners, this engineer improves discovery and context coverage, makes residual risk and exposure aging visible, and coordinates reduction campaigns that help owning teams act on the highest-priority exposures. The role drives prioritization, reporting, and remediation follow-through while leaving risk-acceptance decisions, policy setting, and remediation execution with the accountable teams.

Job Description and Requirements Exposure & Attack Surface Discovery

Operate and optimize exposure and external attack-surface discovery capabilities to identify internet-facing, unmanaged, shadow, and newly introduced assets across the technology estate.
Reconcile discovery results with authoritative asset inventories and ownership data, investigate coverage gaps, and improve attribution of assets to the responsible application, service, or department.
Develop repeatable workflows and automation that reduce discovery latency and increase coverage, data quality, and visibility across relevant asset classes.

Vulnerability & Misconfiguration Prioritization

Analyze vulnerabilities and misconfigurations from exposure management and partner-team data sources, correlating findings with exploitability, asset criticality, internet exposure, compensating controls, and available threat intelligence.
Design, tune, and document contextual prioritization logic that moves decision-making beyond raw severity scores and produces a defensible, risk-ranked exposure backlog.
Perform detailed exposure analysis for high-impact vulnerabilities, zero-days, and material misconfigurations, and communicate why an exposure matters to technical and non-technical stakeholders.
Partner with the Purple Team and other security functions to validate prioritization assumptions and improve correlation between top-priority exposures and confirmed exploitability.

Container & API Runtime Posture

Maintain an accurate inventory and standing risk view of live containers and APIs, including running-image risk, workload ownership, API posture, and relevant production context.
Correlate build- and deployment-time findings received from Adaptive Security with production runtime context to determine whether identified risks remain relevant once workloads are live.
Identify systemic container and API posture issues and develop prioritized remediation campaigns for application- and service-owning teams.

Threat Intelligence Integration

Integrate external and internal threat intelligence into exposure scoring and prioritization, including active exploitation, adversary behavior, and emerging-vulnerability signals.
Maintain awareness of changes in the threat landscape and assess their relevance to the organization’s exposed technologies, assets, containers, and APIs.
Produce timely, actionable notifications when new intelligence materially changes the likelihood or priority of an existing exposure.

Residual Risk Visibility & Reporting

Build and maintain dashboards, reporting, and data pipelines that show residual exposure risk by department, asset class, severity tier, ownership, and age.
Define and monitor measures such as discovery coverage, context coverage, exposure aging, reduction rate, and residual-risk trend; investigate data-quality or performance issues that affect reporting trustworthiness.
Translate complex exposure data into clear technical findings, trends, and recommended actions for engineering leadership, department leaders, Governance Risk Intelligence, and service-owning teams.

Exposure Reduction Coordination

Track high-priority exposures against expected remediation timelines, identify aging and overdue items, and coordinate follow-through with accountable application- and service-owning teams.
Plan and run targeted exposure-reduction campaigns, establish measurable outcomes, and report progress, blockers, and residual risk to relevant stakeholders.
Route exposures requiring risk-acceptance guidance to the owning team and Governance Risk Intelligence, and route findings requiring manual review, threat modeling, or adversary validation to the appropriate security function.
Provide technical guidance and prioritization context without assuming ownership of risk acceptance, policy decisions, or remediation execution.

Minimum Qualifications:

2-6 years of hands-on experience in vulnerability management, exposure management, attack surface management, cloud security, or a related security engineering discipline.
Hands-on experience with vulnerability scanning, exposure management, or attack surface management platforms and the analysis of vulnerabilities, misconfigurations, unmanaged assets, and security posture findings.
Experience prioritizing exposures using factors such as exploitability, asset criticality, internet exposure, threat intelligence, compensating controls, and business context, not severity scores alone.
Working knowledge of common enterprise and cloud technologies, including operating systems, networks, containers, APIs, and at least one major cloud platform.
Familiarity with vulnerability and security frameworks and sources such as CVSS, CISA KEV, EPSS, NIST, MITRE ATT&CK, and CIS benchmarks.
Proficiency in at least one scripting or automation language, such as Python, Bash, or PowerShell, used to integrate security data, automate analysis, or improve exposure-management workflows.
Ability to investigate complex exposure data, identify systemic risk patterns, and clearly communicate prioritized findings and recommended actions to technical and non-technical stakeholders.

Preferred Qualifications:

Bachelor’s degree in Computer Science, Cybersecurity, Information Security, or a related field, or equivalent practical experience.
Hands-on experience assessing exposure across multi-cloud or cloud-native environments.
Experience with enterprise vulnerability management, exposure management, attack-surface management, or adjacent platforms.
Familiarity with AI-enabled SecOps (e.g., ML-based risk prioritization, or AI-assisted workflows)
Basic knowledge of common cloud environments such as AWS, Azure, or GCP.
Experience developing dashboards, metrics, or data pipelines.
Experience supporting compliance and audit requirements (SOC 2, ISO 27001, FedRAMP) from a technical control perspective.
Relevant certifications such as CC, SEC+, CySA+, or equivalent

Relativity is committed to competitive, fair, and equitable compensation practices.

This position is eligible for total compensation which includes a competitive base salary, an annual performance bonus, and long-term incentives.

The expected salary range for this role is between following values:

$104,000 and $156,000 The final offered salary will be based on several factors, including but not limited to the candidate's depth of experience, skill set, qualifications, and internal pay equity. Hiring at the top end of the range would not be typical, to allow for future meaningful salary growth in this position.

Required Skills:

Endpoint Security, Network Security, Penetration Testing, Security Architecture Design, Security Automation, Security Information, Security Information and Event Management (SIEM), Security Operations, Threat Modeling, Vulnerability Management

Apply About employer

Report this job