Senior Exposure Management Engineer (Remote - US only, Mid-Atlantic)

Applicants must be legally authorized to work in the US without current or future visa sponsorship. Some travel (up to 10%) may be required. This is a senior engineering role within a Mid-Atlantic exposure management practice at a profitable, fast-growing information security company that serves large enterprises and government agencies. The team helps clients build unified asset inventories and risk-based exposure programs that turn fragmented security data into a single asset model and a prioritized remediation backlog. The engineer will combine hands-on platform work with business-aware prioritization and client-facing collaboration.

What you'll do

• Build and maintain unified asset inventories by integrating data from many security and IT tools, including asset ownership and business-context tagging.
• Configure risk-based vulnerability prioritization using exploitability, exposure, asset criticality and existing controls rather than CVSS alone, including de-duplication across scanners.
• Run enterprise vulnerability scanning programs: authenticated scanning, scan design and scheduling, false-positive validation, and remediation tracking through re-scan and closure.
• Automate workflows with Python, PowerShell or REST APIs, such as ticket creation and routing to ServiceNow or Jira, SLA tracking and escalation rules for critical issues.
• Build dashboards and metrics on remediation progress, SLA compliance, coverage and risk reduction for both operations teams and security leadership.
• Join client operational cadence meetings, report on findings and progress, and help senior engineers resolve platform issues.

What you need

• 7+ years of experience in cybersecurity engineering.
• Hands-on exposure management or risk-based vulnerability management experience, including building unified asset inventories.
• Experience with vulnerability scanners and/or exposure or CNAPP platforms such as Tenable, Qualys, Rapid7, Wiz or similar.
• Scripting experience (Python, PowerShell or similar) and experience working with APIs or automating workflows.
• Solid grasp of security fundamentals: vulnerabilities, misconfigurations, identity and access control, and security monitoring.
• Strong written and verbal communication skills and the ability to work well with engineering teams.
• Must be authorized to work for any US employer; no visa sponsorship is available.

Applicants must be based in: United States.

How to apply

Get the free i'llTip app to see the employer's details and apply. i'llTip's AI can tailor your résumé to this job, and you'll get alerts for similar roles.

Prefer the website? Continue on illtip.comOr get the app: Android · iPhone

🔔 Get new jobs like this first: join i'llTip Jobs on Telegram · or get personal job alerts