Threat Mitigation Lead - Network and Systems Attack Surface

United StatesRemoteFull-timelead

OtherNetwork

1 views0 saves0 applied

Apply Now

Quick Summary

Overview

This position is listed on behalf of a partner company, who manages all applications and next steps.

Technical Tools

OtherNetwork

This role leads strategic and technical efforts to reduce cybersecurity risk across a complex technology environment.
You’ll translate vulnerability, exposure, and threat intelligence into focused remediation campaigns with clear owners, priorities, and timelines.
The position combines hands-on security expertise with cross-functional leadership across cyber defense, infrastructure, applications, and security engineering teams.
You’ll help automate and improve remediation workflows while ensuring mitigation requirements are properly implemented and validated.
As a technical anchor for the threat surface management function, you’ll mentor analysts and strengthen the team’s capabilities.
The role offers an opportunity to influence enterprise security strategy while working with emerging threats, vulnerabilities, and adversary techniques.
Success requires strong technical judgment, communication skills, and the ability to drive meaningful outcomes without relying on direct authority.

Lead vulnerability, exposure, and threat mitigation campaigns from intake through closure, establishing clear priorities, ownership, targets, and timelines.
Analyze threat intelligence and exposure data to identify and prioritize risks using factors such as CVSS, EPSS, KEV, active exploitation intelligence, and adversary TTPs.
Develop and implement solutions that accelerate remediation, including automation for triage, deduplication, ownership identification, and stakeholder notification.
Track remediation progress, remove blockers, escalate stalled or high-severity items, and maintain accountability through to completion.
Capture root causes, technical recommendations, and lessons learned and translate them into sustainable improvements for security and remediation processes.
Support application, platform, and infrastructure teams in interpreting mitigation requirements and developing practical security plans.
Validate security controls and mitigation evidence within GRC systems, ensuring records are complete, accurate, and ready for closure.
Serve as a technical subject matter expert for the threat surface management analyst community, leading technical investigations into vulnerabilities, threat intelligence, and adversary behavior.
Identify capability gaps, mentor analysts, and develop strategies that expand the threat surface management team's effectiveness.
Build strong working relationships with cyber defense, identity and access management, security architecture and engineering, platform, and other cybersecurity teams.
Advise cybersecurity leadership and business stakeholders by translating technical risk and remediation information into clear, actionable decisions.

Requirements

~2 min read

Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, or a related discipline.
At least 5 years of experience in threat surface management, vulnerability management, cyber defense, or a closely related cybersecurity discipline.
At least 3 years of experience scoping and driving remediation or mitigation campaigns to completion across teams without direct management authority.
At least 3 years of experience working with threat intelligence and exposure data and applying it to risk prioritization.
Strong knowledge of vulnerability and threat prioritization frameworks and signals, including CVSS, EPSS, KEV, adversary TTPs, and active exploitation reporting.
Hands-on experience with security control technologies such as vulnerability scanning and prioritization platforms, endpoint detection and response (EDR), and security information and event management (SIEM) systems.
Demonstrated technical leadership experience, including mentoring analysts, leading technical deep dives, and developing team capabilities without formal authority.
Experience automating remediation workflows, particularly processes involving triage, deduplication, ownership identification, or stakeholder notification.
Experience collaborating with cyber defense, security operations, or threat intelligence functions.
Experience in a regulated environment with formal control validation, compliance, and audit requirements is advantageous.
Relevant certifications such as CISSP, OSCP, GIAC Enterprise Vulnerability Assessor (GEVA), or equivalent are preferred.
Excellent communication skills, with the ability to explain complex technical threats and remediation requirements to both technical and business audiences.
Strong analytical, problem-solving, risk-management, and attention-to-detail skills.