About this role
Job Description
This role will focus on two primary areas:
Continuous Threat Exposure Management (CTEM) : Leading the design and operationalization of a CTEM program that provides continuous visibility into the organization?s cyber exposure. This includes threat exposure analysis, attack path analysis, validation of remediation through testing, and risk-based prioritization to ensure critical issues are addressed first.. The resource will strengthen coordination between CTEM, SOC, and vulnerability management workflows, ensuring that exposure findings translate into actionable improvements in monitoring, detection, and response.
Demonstrated hands-on experience using Security Copilot and security automation agents to support CTEM execution, including AI-assisted threat analysis, correlation of exposure data, attack?path analysis, and validation of exploitability
DevSecOps Pipeline Security & Cloud Security Posture Management: Implementing and enhancing DevSecOps practices by embedding security into the software development lifecycle (SDLC) and CI/CD pipelines. The resource will lead the integration of security testing tools (SAST, DAST, SCA, container/IaC scanning) into automated build processes, ensuring vulnerabilities are identified and addressed as early as possible (?shift-left? approach). In parallel, the role will oversee cloud security posture management (CSPM) and cloud-native application protection platform (CNAPP) operations across OH?s AWS and Azure environments, to continuously monitor and remediate cloud security risks. This involves implementing a CSPM/CNAPP solution to identify misconfigurations, insecure practices, and runtime threats, and working with cloud teams to reduce risk.
This role is explicitly hands-on and operational. It requires a strong technical background in cyber defense operations and the ability to execute and deliver tangible outcomes in the areas above. The resource will be expected to work across teams (SOC, DevOps, cloud engineering, etc.) to implement and execute, rather than only providing recommendations.
Responsibilities
a. CTEM & Exposure Management:
- Operate and Mature Day?to? Day CTEM Activities: Execute continuous, day?to?day threat and exposure analysis as part of regular CTEM operations. This includes daily review and analysis of attack surface risk using Microsoft Defender, Tenable, Prisma Cloud, and native Azure and AWS security services, to identify vulnerabilities, misconfigurations, identity risks, and externally exposed assets requiring immediate attention.
- Perform day-to-day threat analysis leveraging multiple threat intelligence sources, vulnerability disclosures, emerging cyber threat trends, and security advisories to assess organizational impact and drive risk-based response and remediation activities.
- Risk-Based Prioritization & Remediation: Implement mechanisms to assess and score exposures based on exploitability, potential impact, and relevant threat intelligence. Develop risk-based remediation plans and work with IT and application teams to ensure that critical exposures are remediated promptly. Provide clear communication of risk rankings and recommended actions to stakeholders.
<p clas