- Detroit, Michigan, United States +1 more
- Senior
- 8+ years
As an Attack Surface Validation & Exposure Engineer in the Attack Surface Management function, you will serve as a strategic contributor within EY’s Vulnerability Management and Exposure Assessment capability, with a deep focus on attack path discovery, scalable vulnerability detection, and exposure validation through self-engineered solutions.
Locations (2)
- Detroit, Michigan, United States
- Alpharetta, Georgia, United States
Responsibilities
- Design and engineer automated attack‑path discovery and validation capabilities
- Build scalable vulnerability detection and verification pipelines that combine enterprise scanning sources with custom validation logic
- Develop controlled exploitation and exploit‑chaining workflows to safely demonstrate real attacker outcomes
- Operationalize continuous offensive validation by engineering testing routines that can run with minimal human prompting
- Fuse Vulnerability Intelligence and Cyber Threat Intelligence into detection and prioritization—tracking exploit maturity/availability, active exploitation signals, and technique trends, etc