Cyber Threat Exposure Management Lead
Gruve · Pune · onsite · Posted 29d ago
Undisclosed5–10 yrsfulltimeSourced from
About a minute. You'll make an account on the way through.
About this role
About Gruve
Gruve is an innovative software services startup dedicated to transforming enterprises to AI powerhouses. We specialize in cybersecurity, customer experience, cloud infrastructure, and advanced technologies such as Large Language Models (LLMs). Our mission is to assist our customers in their business strategies utilizing their data to make more intelligent decisions. As a well-funded early-stage startup, Gruve offers a dynamic environment with strong customer and partner networks.
Position summary:
We are looking for an experienced CTEM (Continuous Threat Exposure Management) Expert to lead the design, implementation, and continuous operation of exposure management programs for our clients. This role sits at the intersection of vulnerability management, attack surface management, threat intelligence, and risk-based remediation helping clients move from periodic point-in-time assessments to a continuous, adversary-informed exposure reduction program aligned with 5-stage CTEM framework (Scoping, Discovery, Prioritization, Validation, and Mobilization).
You will work directly with client CISOs, security operations teams, and IT owners to build programs that identify, prioritize, validate, and reduce cyber exposure across on-prem, cloud, and hybrid environments and demonstrate measurable reduction in exploitable risk over time.
Key Roles Responsibilities:
- Lead end-to-end delivery of CTEM engagements across the five stages: Scoping, Discovery, Prioritization, Validation, and Mobilization
- Design and operationalize continuous exposure management programs tailored to client risk appetite, industry, and regulatory context
- Integrate and correlate data across vulnerability management, attack surface management (ASM), cloud security posture management (CSPM), threat intelligence, and breach attack simulation (BAS) tools to build a unified exposure view
- Translate technical findings (CVEs, misconfigurations, exposed assets, identity risks) into business-risk-prioritized remediation plans using exploitability, asset criticality, and threat context (e. g. , KEV, EPSS, active exploitation campaigns)
- Drive adversarial validation of exposures through coordination with red/purple teams, pentesters, or automated validation platforms to confirm real-world exploitability
- Own exposure reduction metrics and reporting and present progress to client stakeholders and leadership
- Coordinate remediation and patch/mitigation execution with client asset owners, IT, and SOC teams; manage emergency response for zero-days and actively exploited vulnerabilities
- Build and refine CTEM playbooks, runbooks, and governance frameworks; establish exception and risk-acceptance processes
- Support pre-sales activities - scoping calls, proposals, PoCs, and CTEM maturity assessments for prospective clients
- Mentor junior consultants/analysts and contribute to practice capability building, including tool evaluation and methodology development
- Stay current on the threat landscape, emerging attack techniques, and CTEM tooling ecosystem.
Mandatory Qualifications:
- BE/BTech (CS/IT/ETC) or equivalent.
- 5-10 years of overall cybersecurity experience, with 3+ years in exposure management, vulnerability management, attack surface management, or red team/adversary simulation
- Strong hands-on experience with CTEM/exposure management platforms such as Tenable (Exposure Management/One), Qualys VMDR/ETM, CrowdStrike Falcon Exposure Management, or similar
- Practical experience with attack surface management (ASM) tools and breach attack simulation (BAS) platforms
- Solid understanding of vulnerability prioritization frameworks: CVSS, EPSS, CISA KEV, exploit maturity, and asset-criticality-based risk scoring
- Experience integrating exposure data with SIEM/SOAR, ticketing (ServiceNow, Jira), and patch management tools.
- Familiarity with cloud security posture (AWS, Azure, GCP) and CSPM tools, and how cloud exposures fit into a unified CTEM program
- Strong grasp of the MITRE ATTCK framework and how attack-path/graph analysis supports validation and prioritization
- Experience defining and reporting exposure/remediation KPIs (MTTD, MTTR, MTRER, risk reduction trend lines) to executive and client audiences
- Working knowledge of relevant compliance/regulatory frameworks
- Excellent client-facing communication skills - able to translate technical exposure data into business risk narratives for CISOs and boards
Preferred Qualifications:
- Relevant certifications: CISSP, CISM, Tenable/Qualys certifications
- Experience building or scaling a CTEM-as-a-Service offering within an MSSP/consulting practice
- Experience with pre-sales, proposal writing, and CTEM maturity/readiness assessments
- Prior experience mentoring teams or leading a practice/pod within a cybersecurity consulting or MSSP environment
Why Gruve
.
Disclaimer: This job posting and location has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.
Sourced from naukri
Skills
Customer ExperienceCybercyber threatCismCisagoogle cloud platformamazon web servicesCapability BuildingcisspCSPMCrowdstrikeCloud InfrastructureCrowdStrike FalconJira AtlassiancloudCloud SecurityCyber SecurityCommunication SkillscomplianceMicrosoft AzureArtificial Intelligence
About Gruve
Gruve
IT Services & Consulting
301
employees
2024
2 years old
Redwood City, California
US
About
About the Company
Gruve is an innovative Software Services startup dedicated to empowering Enterprise Customers in managing their Data Life Cycle. We specialize in Cyber Security, Customer Experience, Infrastructure, and advanced technologies such as Machine Learning and Artificial Intelligence. Our mission is to assist our customers in their business strategies utilizing their data to make more intelligent decisions. As a well-funded early-stage startup, Gruve offers a dynamic environment with strong customer and partner networks, perfect for fresh graduates looking to kickstart their careers in technology and service delivery.
Why Gruve
At Gruve, we foster a culture of innovation, collaboration, and continuous learning. We are committed to building a diverse and inclusive workplace where everyone, including fresh graduates, can thrive and contribute their best work. If you're passionate about technology and eager to make an impact, we'd love to hear from you.
Industries
IT Services & Consulting
Employee ratings
36 reviews
3.7/ 5
Culture
3.5
Career growth
3.5
Work-life
3.6
Find them on