9 hours ago
Base Salary
$175k - $200k/yr
Responsibilities
- Lead complex client engagements involving vulnerability management modernization, CTEM, exposure management architecture, and risk-based remediation.
- Assess client capabilities, technologies, processes, and operational maturity and provide recommendations aligned with business risk and measurable outcomes.
- Design architectures integrating vulnerability scanning, attack surface management, cloud and container security, identity exposure, and attack path analysis.
- Develop CTEM operating programs covering exposure discovery, prioritization, validation, remediation, governance, and continuous improvement.
- Define risk-based prioritization methods using vulnerability scores, threat intelligence, asset criticality, exploitability, compensating controls, and business context.
- Architect operating models covering ownership, remediation workflows, SLAs, exceptions, risk acceptance, reporting, and cross-team integration.
- Design automation and orchestration workflows for findings normalization, enrichment, ticketing, remediation, and validation.
- Evaluate AI-assisted and agentic security capabilities with appropriate governance and human oversight.
- Integrate vulnerability and exposure intelligence with SOC, SIEM, detection, and response platforms.
- Create reference architectures, assessment methodologies, solution briefs, packaged offerings, playbooks, and enablement materials.
- Support opportunities through technical discovery, architecture, competitive positioning, proposals, SOWs, effort estimation, and technical validation.
- Deliver workshops, executive briefings, technical presentations, and enablement sessions while mentoring junior architects and practitioners.
- Collaborate with security technology partners, regional teams, managed services, service delivery, and account teams.
- Travel approximately 25–35% when needed.
Requirements
- Bachelor’s degree in Computer Science, Cybersecurity, Information Security, Engineering, or a related discipline, or equivalent measurable knowledge and experience from industry, military, defense, or government operations.
- At least 8 years of cybersecurity experience, including substantial hands-on enterprise vulnerability or exposure management experience beyond product implementation.
- Experience in customer-facing presales, solutions architecture, or technology consulting within a VAR, systems integrator, consultancy, or technology vendor.
- Deep expertise in vulnerability management, risk-based prioritization, CTEM, exposure assessment, and remediation lifecycle management.
- Experience with major vulnerability and exposure management platforms, with deep expertise in at least one platform preferred.
- Experience designing enterprise architectures, operating models, integrations, remediation workflows, exception management, and executive reporting.
- Knowledge of CVSS, EPSS, CISA KEV, SSVC, threat intelligence, exploitability, and business-context prioritization.
- Familiarity with EASM, CAASM, attack path analysis, breach and attack simulation, and adversarial validation.
- Experience integrating security platforms with CMDB, ITSM, SOAR, cloud security, and security analytics systems.
- Working knowledge of AWS, Azure, GCP, cloud workload security, container security, and native cloud security tooling.
- Knowledge of automation, orchestration, AI-assisted security, SIEM/SOAR, EDR/XDR, threat detection and response, and SOC operations.
- Understanding of integrations involving CrowdStrike, Palo Alto Networks Cortex XSIAM, Microsoft Sentinel, Splunk, and Google SecOps.
- Knowledge of NIST CSF, NIST SP 800-40, CIS Controls, MITRE ATT&CK, ISO 27001, and CTEM-aligned frameworks.
- CISSP, CCSP, GIAC, relevant cloud security, or vendor architecture certifications are highly preferred.
- Experience creating packaged offerings, reference architectures, assessment methodologies, technical playbooks, or enablement programs is highly preferred.
- Strong technical documentation, presentation, workshop, executive communication, collaboration, organization, and problem-solving skills.
- Ability to manage changing priorities, meet deadlines, hold a valid driver’s license, and work directly with customers.
Benefits
- Comprehensive medical, dental, and vision plans for employees and dependents.
- 401(k) with employer match, 529 College Savings Plan, Health Savings Account, life insurance, and long-term disability coverage.
- Training and development programs, generous paid time off, and work-life balance support.
- Remote position with approximately 25–35% travel when needed.
- Major offices stocked with snacks and beverages and a collaborative workplace culture.
Tech Stack
Categories
Solutions Engineering
About Trace3
Trace3 is an IT solutions integrator and consulting firm that designs, implements, and operates data, security, and cloud infrastructure for enterprises. Its offerings span advisory services, systems integration, and managed operations across networking, storage, backup, and data platforms. Founded in 2002 and headquartered in Irvine, California, Trace3 is privately held and backed by American Securities.