Position Summary

The SPE ASM / Internet-Facing Engineer II will support Secure Posture Engineering initiatives focused on attack surface management, internet-facing asset discovery, asset ownership validation, and external vulnerability coverage assurance. The engineer will establish repeatable processes that reconcile data across security platforms and ensure complete visibility of externally exposed assets. 

Primary Responsibilities

• Maintain inventories of internet-facing assets.
• Reconcile exposure data across CMDB, Tenable, Wiz, and Armis-VIPR.
• Identify unknown, duplicate, orphaned, or unmanaged assets.
• Validate ownership attribution and asset tagging accuracy.
• Verify external vulnerability scan coverage and effectiveness.
• Monitor scan rollover events, coverage gaps, and failed scans.
• Validate IP ranges, CIDRs, and internet-facing exposure mappings.
• Support Wiz sensor validation and scanning coverage verification.
• Develop operational reporting and exception management workflows.
• Create runbooks and ownership handoff processes.

Required Experience

• 3-6 years of security engineering, attack surface management, or vulnerability management experience.
• Experience with Tenable external scanning.
• Experience using Wiz for exposure management.
• Understanding of Armis-VIPR or similar asset discovery platforms.
• Strong networking fundamentals including IP addressing and CIDR analysis.
• Experience with CMDB processes and asset management.
• Data analysis experience using Excel, SQL, Python, or PowerShell.

Desired Technologies

Tenable, Wiz, Armis-VIPR, CMDB platforms, ServiceNow, SQL, Python, PowerShell.

Deliverables

• Reconciled attack surface inventory.
• Coverage validation reporting.
• Scan assurance monitoring.
• Asset ownership workflows.
• Operational dashboards.
• Runbooks and transition documentation.

Level: Engineer II (Mid-Level)