Threat Mitigation Lead - Network and Systems Attack Surface

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Threat Mitigation Lead - Network and Systems Attack Surface based in the United States.

This role leads strategic and technical efforts to reduce cybersecurity risk across a complex technology environment.
You’ll translate vulnerability, exposure, and threat intelligence into focused remediation campaigns with clear owners, priorities, and timelines.
The position combines hands-on security expertise with cross-functional leadership across cyber defense, infrastructure, applications, and security engineering teams.
You’ll help automate and improve remediation workflows while ensuring mitigation requirements are properly implemented and validated.
As a technical anchor for the threat surface management function, you’ll mentor analysts and strengthen the team’s capabilities.
The role offers an opportunity to influence enterprise security strategy while working with emerging threats, vulnerabilities, and adversary techniques.
Success requires strong technical judgment, communication skills, and the ability to drive meaningful outcomes without relying on direct authority.

Accountabilities

• Lead vulnerability, exposure, and threat mitigation campaigns from intake through closure, establishing clear priorities, ownership, targets, and timelines.
• Analyze threat intelligence and exposure data to identify and prioritize risks using factors such as CVSS, EPSS, KEV, active exploitation intelligence, and adversary TTPs.
• Develop and implement solutions that accelerate remediation, including automation for triage, deduplication, ownership identification, and stakeholder notification.
• Track remediation progress, remove blockers, escalate stalled or high-severity items, and maintain accountability through to completion.
• Capture root causes, technical recommendations, and lessons learned and translate them into sustainable improvements for security and remediation processes.
• Support application, platform, and infrastructure teams in interpreting mitigation requirements and developing practical security plans.
• Validate security controls and mitigation evidence within GRC systems, ensuring records are complete, accurate, and ready for closure.
• Serve as a technical subject matter expert for the threat surface management analyst community, leading technical investigations into vulnerabilities, threat intelligence, and adversary behavior.
• Identify capability gaps, mentor analysts, and develop strategies that expand the threat surface management team’s effectiveness.
• Build strong working relationships with cyber defense, identity and access management, security architecture and engineering, platform, and other cybersecurity teams.
• Advise cybersecurity leadership and business stakeholders by translating technical risk and remediation information into clear, actionable decisions.

Requirements

• Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, or a related discipline.
• At least 5 years of experience in threat surface management, vulnerability management, cyber defense, or a closely related cybersecurity discipline.
• At least 3 years of experience scoping and driving remediation or mitigation campaigns to completion across teams without direct management authority.
• At least 3 years of experience working with threat intelligence and exposure data and applying it to risk prioritization.
• Strong knowledge of vulnerability and threat prioritization frameworks and signals, including CVSS, EPSS, KEV, adversary TTPs, and active exploitation reporting.
• Hands-on experience with security control technologies such as vulnerability scanning and prioritization platforms, endpoint detection and response (EDR), and security information and event management (SIEM) systems.
• Demonstrated technical leadership experience, including mentoring analysts, leading technical deep dives, and developing team capabilities without formal authority.
• Experience automating remediation workflows, particularly processes involving triage, deduplication, ownership identification, or stakeholder notification.
• Experience collaborating with cyber defense, security operations, or threat intelligence functions.
• Experience in a regulated environment with formal control validation, compliance, and audit requirements is advantageous.
• Relevant certifications such as CI…