Exposure Management SME (Cybersecurity)

Location: Remote, Poland

Company

hirify.global is a technology services company delivering engineering and cybersecurity solutions.

What you will do

• Lead the development and operationalization of the Continuous Threat Exposure Management and cloud exposure management program.
• Design a risk-based vulnerability management framework combining vulnerabilities, misconfigurations, identity exposures, and business context.
• Analyze cloud attack paths and validate high-risk exposure scenarios across AWS and GCP environments.
• Define remediation SLAs and workflows for backlog, new, and emergency findings in collaboration with GRC processes.
• Build executive reporting focused on exposure metrics and measurable risk reduction.
• Collaborate with cloud security, engineering, governance, and platform teams to drive remediation.

Requirements

• 5+ years of experience in cloud security, vulnerability management, exposure management, or offensive security.
• Strong understanding of CTEM principles, risk-based security programs, IAM security, privilege escalation paths, and identity exposure risks.
• Experience with CNAPP solutions, preferably Upwind or Wiz, plus attack-path analysis and exposure validation.
• Strong knowledge of AWS and GCP security architecture and experience operating vulnerability management programs.
• Strong analytical and stakeholder communication skills, with experience driving remediation alongside engineering and platform teams.
• Very good English proficiency at B2+–C1 level required.

Nice to have

• Exposure management, attack surface management, security operations, offensive security, or penetration testing experience.
• Experience securing cloud AI environments and AI infrastructure.
• Experience with security telemetry, detection engineering, MITRE ATT&CK, or MITRE ATLAS.
• Industry-recognized security certifications such as AWS Certified Security – Specialty, Google Professional Cloud Security Engineer, CISSP, CCSK, or CCSP.

Culture & Benefits

• Remote work arrangement for the Poland-based role.
• Cross-functional collaboration with cloud security, engineering, governance, and platform teams.
• Equal opportunity employment.