Continuous Threat Exposure Management (CTEM)

Key Responsibilities

• Analyze and prioritize vulnerabilities, security findings, and exposure data received from multiple security platforms, assessment activities, and security teams.
• Apply threat-informed prioritization using active exploitation, known threat activity, exploit availability, asset criticality, business impact, and compensating controls.
• Correlate vulnerability and exposure data with threat intelligence, including Known Exploited Vulnerabilities, emerging campaigns, ransomware activity, and relevant adversary behavior.
• Translate security findings into clear, actionable remediation recommendations and coordinate with asset, application, infrastructure, cloud, and service owners to drive resolution.
• Track remediation progress through closure, validate corrective actions, identify overdue or stalled items, and escalate material risk when required.
• Review findings reported by vulnerability scanners, external attack surface platforms, penetration tests, cloud security tools, audits, assessments, and other security programs.
• Support rapid prioritization and coordinated response for critical vulnerabilities, zero-day threats, and exposures associated with active or credible exploitation.
• Develop operational and executive reporting on exposure trends, remediation performance, risk reduction, service-level adherence, and program effectiveness.
• Produce metrics, dashboards, scorecards, and recurring analyses that enable risk-based decision-making and improve accountability for remediation.
• Collaborate with Security Operations, Threat Intelligence, Infrastructure, Cloud, Engineering, Manufacturing, application teams, and business stakeholders to reduce enterprise exposure.
• Identify recurring weaknesses, emerging exposure trends, and opportunities to improve controls, processes, data quality, ownership, or remediation efficiency.
• Occasionally investigate exposure data for findings of interest and support vulnerability exceptions, risk acceptance, and compensating-control reviews.

Required Qualifications

• Five or more years of experience in cybersecurity, vulnerability management, exposure management, security operations, threat intelligence, or a related discipline.
• Strong knowledge of vulnerability management practices, remediation workflows, vulnerability scoring, exploitability analysis, and risk-based prioritization.
• Demonstrated ability to assess technical findings using threat context, asset importance, business impact, and the likelihood of exploitation.
• Working knowledge of common vulnerability and exposure concepts, including CVE, CVSS, CISA KEV, exploit availability, attack paths, misconfigurations, and external exposure.
• Experience coordinating remediation across infrastructure, endpoint, application, cloud, network, or manufacturing technology teams.
• Experience developing security metrics, dashboards, management reporting, and concise risk communications for technical and leadership audiences.
• Strong analytical, problem-solving, organizational, and stakeholder-management skills.
• Excellent written and verbal communication skills, with the ability to translate complex technical risk into clear business language.

Preferred Qualifications

• Experience with platforms such as CrowdStrike Exposure Management or Falcon Spotlight, Rapid7, ServiceNow Vulnerability Response, Cortex Xpanse, or comparable technologies.
• Experience applying cyber threat intelligence to vulnerability and exposure prioritization workflows.
• Familiarity with external attack surface management, cloud security, identity exposure, application security, or attack-path analysis.
• Experience working with large vulnerability datasets and improving data quality, asset ownership, deduplication, or system-of-record accuracy.
• Experience using Python, APIs, Power BI, SQL, Databricks, or automation platforms to streamline analysis, reporting, and workflow integration.
• Experience supporting a large, global, regulated, manufacturing, or technology-focused enterprise environment.