Director of Attack Surface Engineering

I am working directly with the CISO of a highly regulated organisation and am kicking off a search to hire a Director-level leader to build and run a new Cyber Exposure Management capability/function. This individual will report directly to the CISO.

This person will be responsible for reshaping how the organisation understands and reduces cyber exposure across cloud, infrastructure, applications, identity and external attack surface, moving from fragmented vulnerability activity to a single, engineering-led exposure reduction model.

As the attack landscape evolves at pace, driven by automation, AI-enabled adversaries and increasingly industrialised exploitation, this role is about ensuring the organisation can see, understand and reduce real-world exposure quicker than attackers are finding it. It is about shifting from reactive vulnerability management to continuous, intelligent, engineering-driven risk reduction.

You will define and lead how exposure is measu...