Senior Cybersecurity Engineer - Exposure Management
No salary listed
Senior
Hyderabad, Telangana, India
Hybrid
Cybersecurity
About the job
Requirements
- 7+ years of cybersecurity experience, including significant hands-on experience in vulnerability management, exposure management, threat-informed defense, cloud security, infrastructure security, or security operations engineering.
- Demonstrated experience operating or maturing a risk-based vulnerability management, exposure management, or Continuous Threat Exposure Management (CTEM)-aligned program.
- Proven ability to lead cross-functional remediation initiatives without direct reporting authority.
- Strong understanding of CTEM lifecycle concepts: scoping, discovery, prioritization, validation, and mobilization.
- Experience correlating asset context, exploitability, threat intelligence, business criticality, control state, and remediation feasibility into defensible prioritization decisions.
- Hands-on experience with vulnerability and exposure platforms and related ecosystem tools, including scanners, endpoint detection and response and extended detection and response, configuration management databases and cyber asset attack surface management, cloud security platforms, identity and access management, attack surface management and external attack surface management, information technology service management, security information and event management and security orchestration, automation and response, and threat intelligence sources.
- Experience with service-level agreement models, exception workflows, compensating controls, risk acceptance, residual risk reporting, and validated closure.
- Ability to communicate exposure and residual risk clearly to engineering, operations, security leadership, and non-technical stakeholders.
- Working knowledge of automation, application programming interfaces, scripting, or data analysis methods used to improve exposure management workflows.
Responsibilities
- Help define, implement, and continuously improve the CTEM lifecycle across scoping, discovery, prioritization, validation, and mobilization.
- Translate exposure management strategy into repeatable operating processes, decision criteria, governance routines, and measurable outcomes.
- Identify maturity gaps across asset coverage, signal quality, prioritization, validation, remediation ownership, exception handling, and executive reporting.
- Partner with security, infrastructure, cloud, endpoint, identity, application, architecture, and business teams to establish shared accountability for exposure reduction.
- Drive structured exposure review cycles that move the organization from vulnerability reporting to validated, risk-based remediation and measurable risk reduction.
- Engineer and operate exposure management capabilities across infrastructure, cloud, endpoints, identity, applications, and third-party surfaces.
- Maintain and enhance tooling that aggregates vulnerability data, asset context, threat intelligence, and exploitability signals.
- Ensure accurate asset discovery, coverage validation, and telemetry quality across the enterprise attack surface.
- Drive risk- and threat-informed prioritization beyond Common Vulnerability Scoring System scoring.
- Incorporate exploit intelligence, threat actor activity, asset criticality, and compensating controls.
- Partner with technology and business owners to translate exposure into remediation priorities.
- Correlate exposure data with threat intelligence and adversary tactics, techniques, and procedures.
- Support zero-day and emerging threat response through rapid exposure analysis.
- Define and maintain CTEM outcome metrics, including exposure reduction, risk burndown, validated closure rate, service-level agreement adherence, exception aging, reintroduced exposure rate, coverage gaps, telemetry freshness, owner assignment accuracy, and remediation cycle time.
- Build executive, operational, engineering, and audit views that explain risk, accountability, trend, residual exposure, and progress against maturity goals.
- Convert technical findings into business-relevant narratives that support prioritization, funding, architecture decisions, and remediation mobilization.
- Identify recurring exposure patterns and recommend control, architecture, automation, or process improvements.
- Lead exposure reduction initiatives across teams without direct reporting authority, using data, risk rationale, business impact, and clear decision records to drive alignment.
- Facilitate remediation planning across infrastructure, cloud, endpoint, application, identity, security operations center, governance, risk, and compliance, and business stakeholders.
- Build consensus on ownership, prioritization, compensating controls, exception paths, and remediation timelines.
- Escalate systemic blockers with clear options, residual risk framing, and recommended decisions.
- Mentor analysts and engineers while raising the overall maturity of exposure management practices.
- Collaborate with subject matter experts to define mitigation strategies and compensating controls.
- Provide leadership with clear, defensible views of exposure and residual risk.
- Provide operational guidance to and oversight of managed server provider technicians.
Desired Qualifications
- Experience implementing or significantly maturing a CTEM-style program in a large enterprise.
- Familiarity with Exploit Prediction Scoring System, Cybersecurity and Infrastructure Security Agency Known Exploited Vulnerabilities, Stakeholder-Specific Vulnerability Categorization-style decisioning, Common Vulnerability Scoring System version 4 environmental and threat context, exploit telemetry, ransomware intelligence, and threat actor tactics, techniques, and procedures mapping.
- Experience with attack-path analysis, adversarial exposure validation, breach and attack simulation, red-team or penetration-testing integration, or control validation.
- Experience applying artificial intelligence or machine learning to exposure management, including summarization, deduplication, risk explanation, ticket enrichment, remediation recommendation drafting, or executive reporting.
- Knowledge of artificial intelligence governance, human-in-the-loop controls, model and data protection, auditability, and safe automation design.
- Experience integrating exposure workflows with ServiceNow or equivalent information technology service management platforms.
- Experience with cloud-native exposure management across Amazon Web Services, Microsoft Azure, Google Cloud Platform, containers, Kubernetes, infrastructure as code, software as a service, identity, and application security findings.
- Industry certifications such as Certified Information Systems Security Professional, Global Information Assurance Certification, Offensive Security Certified Professional, cloud security, or relevant offensive or defensive security credentials.
About the company
Syneos Health provides end-to-end biopharmaceutical solutions across the clinical-to-commercial spectrum. It helps biopharma companies, healthcare organizations, and investors by offering specialized expertise, insights, and technology-enabled services to move therapies faster to patients. Its offerings include Kinetic, a modern omnichannel customer engagement platform that uses targeting and analytics to coordinate nationwide healthcare communications, and Syneos One, an asset development approach that aligns strategy and execution from early concept through commercialization. The company uses AI and advanced tech to improve performance and reduce risk in drug development and market delivery. Its goal is to be a trusted partner that accelerates therapy development and delivery by combining scientific know-how with integrated, data-driven services.
Company Size
10,001+
Company Stage
IPO
Headquarters
Morrisville, North Carolina
Founded
1985
Get referred to Syneos Health
See people who can refer or advise you
Simplify's Take
What believers are saying
- KAI partnership on April 30, 2026 expands commercial intelligence for U.S. pharma launches.
- Syneos says Causaly cut study-design insight time roughly 50% in 2026.
- Databricks reduced source-data review from days to hours, speeding trial interventions.
What critics are saying
- March 31, 2026 Kempen discovery keeps securities-fraud claims alive over backlog reporting.
- Syneos Italy announced 49 layoffs on March 25, 2026, signaling operating pressure.
- A sustained data-integrity finding in Kempen would damage sponsor trust and trigger defections.
What makes Syneos Health unique
- Syneos combines clinical development and commercialization under one roof, unlike pure-play CROs.
- August 18, 2026 AI stack spans Causaly, Databricks, and Microsoft across workflows.
- More than 280 Microsoft Copilot agents give Syneos broad internal automation depth.
Help us improve and share your feedback! Did you find this helpful?
Benefits
- Health Insurance
- Dental Insurance
- Vision Insurance
- 401(k) Company Match
- Employee Stock Purchase Plan
- Flexible Work Hours
- Paid Vacation
- Paid Sick Leave
- Remote Work Options