Technical Lead, Pure Storage

• 8-10+ years in cybersecurity with deep focus on vulnerability management, asset discovery, or attack surface management
• Proven experience running enterprise-grade scanners such as Tenable, runZero, or the like
• Hands-on experience of cloud platforms (AWS, Azure, GCP), containers (Docker/Kubernetes), and modern CI/CD
• Proficient in scripting/automation (Python, Bash, PowerShell)
• Understanding of Windows, Linux, networking protocols, and hardening techniques
• Familiarity with compliance frameworks (PCI, HIPAA, NIST, ISO) and how they map to vulnerability remediation
• Good understanding of OWASP, CVSS and MITRE ATT&CK framework and the software development lifecycle
• Demonstrated ability to influence cross-functional teams and drive accountability without authority
• Analytical, highly organized, and comfortable translating risk into business terms
• Self-starter who thrives in fast-paced, agile environments and communicates with clarity at all levels

Desirable

• You will own and evolve our Attack Surface Management (ASM) program, unifying asset discovery, vulnerability intelligence, secrets detection, and automated remediation into a single, outcomes-driven capability.
• Your mandate is to give the company a real-time, risk-prioritized view of every internal and external exposure—and drive it down to zero wherever possible
• As the ASM Lead, you will sit at the intersection of Security Engineering, Infrastructure, Cloud, and DevOps.
• You will design strategy, set priorities, and lead a small team that continuously discovers assets, assesses and manages vulnerabilities, manages secrets and code-risk detection, perform collaboration and stakeholder engagements, automate and provide metrics and reporting, and orchestrates remediation at scale.
• Success means measurable risk reduction, shorter time-to-remediate, and clear executive-level reporting
• Define the multi-year ASM roadmap; align tooling, data flows, and KPIs with business risk
• Maintain a holistic inventory of on-prem, cloud, container, SaaS, and third-party assets, enriched with business context
• Lead deployment and tuning of discovery scanners (network, cloud, container, endpoint)
• Correlate asset data to CMDB and CI/CD systems for real-time context
• Conduct continuous discovery and vulnerability assessment across enterprise-wide assets
• Operate and optimize the ASM tech stack (e.g., Tenable, etc.)
• Prioritize vulnerability remediation using criticality, exploit probability, rating, threat intel and business risk exposure
• Document, report, and track remediation through Jira/ServiceNow workflows
• Manage secret discovery tooling to eradicate hard-coded secrets across repos
• Partner with developers to shift-left credential hygiene in CI/CD pipelines
• Act as the single point of coordination (aka Customer Success Manager for ASM) among Security, Cloud, Infrastructure, and Engineering teams, aligning remediation efforts and SLAs
• Communicating vulnerability results in language understood by both engineers and executives
• Integrate scanners/APIs with ticketing systems to auto-generate and track findings
• Define and publish KPIs (e.g., asset coverage, mean-time-to-remediate, risk-reduction trend)
• Produce dashboards and exec briefs that demonstrate posture and progress