IT Security - Exposure Management Lead

NO (Corp-to-Corp, H1B, Sponsorship, F1, OPT) - 100% Remote - 12 Month Contract to Hire

$130k - $150K Salary or $65/hr W-2 - $85/hr

CBTS is searching for an IT Security - Exposure Management lead. The Lead, Exposure Management serves as an operational coordinator for urgent cybersecurity exposure events. This role is responsible for leading day-to-day response activities, assessing enterprise exposure, coordinating stakeholders, tracking remediation progress, and driving issues to resolution.

The Lead is expected to independently manage active exposure events while partnering closely with the Principal to ensure timely assessment, communication, escalation, and closure. This role work closely with other Leads to provide continuity, backup coverage, and support for simultaneous events.

Automation & Process Optimization

• Identify, prioritize, and implement opportunities to automate exposure intake, validation, evidence collection, status tracking, reporting, and closure activities.
• Define automation requirements and partner with security and technology teams to develop secure, reliable and scalable workflows.
• Establish controls, monitoring, and exception-handling processes to ensure automated workflows remain accurate, auditable, and aligned with risk-management expectations.
• Measure automation effectiveness and use operational data to reduce manual effort, improve response speed, and strengthen process consistency.

Stakeholder Communication & Engagement

• Communicate effectively with technical teams, business leaders
• Translate technical exposure and remediation information into clear, concise updates tailored to executives and technology owners.
• Communicate changes in risk, scope, priority, dependencies, and target dates promptly, and confirm stakeholder understanding of required actions.

Required

• Experience identifying and delivering workflow automation or orchestration opportunities in vulnerability management.
• Ability to define automation requirements, acceptance criteria, controls, exception handling, and measurable outcomes in partnership with technical teams.
• Strong written and verbal communication skills, including the ability to translate complex technical risk into clear actions and executive-level summaries.

Technical Requirements

• Hands-on proficiency with Python scripting for workflow automation, data processing, validation, and operational reporting.
• Ability to develop, test, troubleshoot, document, and maintain secure, reusable scripts with appropriate logging, error handling, and exception management.
• Experience integrating systems and working with structured data formats such as JSON and CSV.
• Working knowledge of source control and collaborative development practices.
• Ability to query, transform, and analyze operational or security data using SQL, Python data libraries, or comparable tools.
• Familiarity with security platforms, ticketing systems, workflow-orchestration tools, and dashboarding technologies used to automate and monitor exposure-management processes.
• Experience applying generative AI capabilities to vulnerability management use cases.
• Understanding of responsible AI practices, including data protection, access controls, human oversight, validation and accuracy considerations, and auditability.
• Ability to define measurable acceptance criteria and monitor AI-enabled workflows for quality, reliability, security, and operational value.

CBTS provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, disability, genetic information, marital status, amnesty, or status as a protected veteran in accordance with applicable federal, state and local laws.