Cyber Threat Exposure Management Lead

Position summary:

We are looking for an experienced CTEM (Continuous Threat Exposure Management) Expert to lead the design, implementation, and continuous operation of exposure management programs for our clients. This role sits at the intersection of vulnerability management, attack surface management, threat intelligence, and risk-based remediation helping clients move from periodic point-in-time assessments to a continuous, adversary-informed exposure reduction program aligned with 5-stage CTEM framework (Scoping, Discovery, Prioritization, Validation, and Mobilization).

You will work directly with client CISOs, security operations teams, and IT owners to build programs that identify, prioritize, validate, and reduce cyber exposure across on-prem, cloud, and hybrid environments and demonstrate measurable reduction in exploitable risk over time.

Key Roles & Responsibilities:

• Lead end-to-end delivery of CTEM engagements across the five stages: Scoping, Discovery, Prioritization, Validation, and Mobilization
• Design and operationalize continuous exposure management programs tailored to client risk appetite, industry, and regulatory context
• Integrate and correlate data across vulnerability management, attack surface management (ASM), cloud security posture management (CSPM), threat intelligence, and breach & attack simulation (BAS) tools to build a unified exposure view
• Translate technical findings (CVEs, misconfigurations, exposed assets, identity risks) into business-risk-prioritized remediation plans using exploitability, asset criticality, and threat context (e.g., KEV, EPSS, active exploitation campaigns)
• Drive adversarial validation of exposures through coordination with red/purple teams, pentesters, or automated validation platforms to confirm real-world exploitability
• Own exposure reduction metrics and reporting and present progress to client stakeholders and leadership
• Coordinate remediation and patch/mitigation execution with client asset owners, IT, and SOC teams; manage emergency response for zero-days and actively exploited vulnerabilities
• Build and refine CTEM playbooks, runbooks, and governance frameworks; establish exception and risk-acceptance processes
• Support pre-sales activities — scoping calls, proposals, PoCs, and CTEM maturity assessments for prospective clients
• Mentor junior consultants/analysts and contribute to practice capability building, including tool evaluation and methodology development
• Stay current on the threat landscape, emerging attack techniques, and CTEM tooling ecosystem.

Mandatory Qualifications:

• BE/BTech (CS/IT/E&TC) or equivalent.
• 5–10 years of overall cybersecurity experience, with 3+ years in exposure management, vulnerability management, attack surface management, or red team/adversary simulation
• Strong hands-on experience with CTEM/exposure management platforms such as Tenable (Exposure Management/One), Qualys VMDR/ETM, CrowdStrike Falcon Exposure Management, or similar
• Practical experience with attack surface management (ASM) tools and breach & attack simulation (BAS) platforms
• Solid understanding of vulnerability prioritization frameworks: CVSS, EPSS, CISA KEV, exploit maturity, and asset-criticality-based risk scoring
• Experience integrating exposure data with SIEM/SOAR, ticketing (ServiceNow, Jira), and patch management tools.
• Familiarity with cloud security posture (AWS, Azure, GCP) and CSPM tools, and how cloud exposures fit into a unified CTEM program
• Strong grasp of the MITRE ATT&CK framework and how attack-path/graph analysis supports validation and prioritization
• Experience defining and reporting exposure/remediation KPIs (MTTD, MTTR, MTRER, risk reduction trend lines) to executive and client audiences
• Working knowledge of relevant compliance/regulatory frameworks
• Excellent client-facing communication skills — able to translate technical exposure data into business risk narratives for CISOs and boards

Preferred Qualifications:

• Relevant certifications: CISSP, CISM, Tenable/Qualys certifications
• Experience building or scaling a CTEM-as-a-Service offering within an MSSP/consulting practice
• Experience with pre-sales, proposal writing, and CTEM maturity/readiness assessments
• Prior experience mentoring teams or leading a practice/pod within a cybersecurity consulting or MSSP environment