Exposure Management SME

If you need support in completing the application or if you require a different format of this document, please get in touch with UKI.Recruitment@tcs.com with the subject line: "Application Support Request".

Job Type: Permanent

Location: Dublin (Hybrid 3 days in office)

Careers at TCS: It means more

TCS is a purpose-led transformation company, built on belief. We do not just help businesses to transform through technology. We support them in making a meaningful difference to the people and communities they serve - our clients include some of the biggest brands in the UK and worldwide. For you, it means more to make an impact that matters, through challenging projects which demand ambitious innovation and thought leadership.

Own and operate the Exposure Management programme across company by leveraging Qualys External Attack Surface Management (EASM) and CrowdStrike Exposure Management capabilities to identify, assess, prioritize, track, and reduce cyber risk exposures across internal and external environments. Drive risk-based remediation of vulnerabilities, misconfigurations, exposed assets, attack paths, and security weaknesses across infrastructure, endpoints, applications, APIs, cloud services, data platforms, and identity systems. Collaborate with technology and business stakeholders to improve overall security posture, enhance visibility of cyber risk, and ensure timely remediation of critical findings

Experienced Cyber Security Professional with strong expertise in Exposure Management, Vulnerability Management, Attack Surface Management, and Security Posture Management. Proven experience managing enterprise-wide vulnerability and exposure programs across cloud, infrastructure, endpoints, applications, APIs, data platforms, and internet-facing assets. Strong understanding of cyber risk management, attack surface reduction, vulnerability prioritization, remediation governance, and security posture reporting. Ability to collaborate with technical and business stakeholders to provide visibility of risk exposure and drive remediation initiatives across large-scale enterprise environments.

• External Attack Surface Management (EASM)
• Internal Exposure Management and Asset Discovery
• Vulnerability Management and CVE Prioritization
• Risk-Based Vulnerability Remediation
• Cloud Security Posture Management
• Endpoint Security Exposure Assessment
• Network Security Exposure Monitoring
• Identity and Privileged Access Exposure Reviews
• Application and API Exposure Management
• Security Posture Assessment and Reporting
• Bug Bounty Coordination and Vulnerability Validation
• Exposure Remediation Governance and Tracking

• CVSS Risk Scoring Methodology
• Common Vulnerabilities and Exposures (CVE)
• Common Weakness Enumeration (CWE)
• MITRE ATT&CK Framework
• NIST Cybersecurity Framework
• Vulnerability Management Lifecycle
• Exposure Management Principles
• External Attack Surface Management (EASM)
• Security Posture Management
• Threat and Risk-Based Prioritization
• Asset Inventory and Exposure Visibility
• Security Governance and Risk Managemen

Proficiency in penetration testing tools such as:

• Qualys VMDR
• Qualys External Attack Surface Management (EASM)
• Qualys Policy Compliance
• CrowdStrike Exposure Management
• CrowdStrike Falcon
• Microsoft Defender Vulnerability Management
• Microsoft Defender for Endpoint
• Microsoft Defender for Cloud
• Microsoft Secure Score
• Microsoft Exposure Management
• Microsoft Entra ID Security Assessments
• Azure Security Center
• AWS Security Hub
• Jira

• Hands-on experience in Exposure Management, Vulnerability Management, Security Posture Management, or Cyber Security Operations.
• Experience working with Security Operations, Threat Intelligence, and Incident Response teams.
• Understanding of Secure Score improvement initiatives and continuous security posture optimization.
• Knowledge of attack path analysis and Exposure Prioritization Frameworks.
• Experience coordinating Bug Bounty and Vulnerability Disclosure Programs.
• Understanding of ISO 27001, NIST, CIS Controls, GDPR, and PCI-DSS compliance requirements.
• Preferred Certification: Qualys VMDR EASM Specialist, CSPM, SC-200,100,500,CISSP, CRISC, AWS Security Speciality.

This is to notify you that TCS does not ask for any sort of payment or security deposit from candidates at any stage of the recruitment process. The firm never sends out job offers from free internet email services like Gmail, Yahoo Mail, and so on. TCS has not authorised any third-party company to collect money on their behalf. As a vigilant job seeker, beware of fraudulent recruitment activity and protect your interests! You can write to UKI.recruitment@tcs.com to report any fraudulent activity.

Due to the high volume of applications, we will be unable to contact each applicant individually on the status of their application. If you have not received a direct response within 30 days, then it should be deemed unsuccessful on this occasion.

Join us and do more of what matters. Apply online now.