Principal Cybersecurity Attack Surface Management Infrastructure Detective

Job Description:

Join AT&T and reimagine the communications and technologies that connect the world. Our Chief Security Office ensures that our assets are safeguarded through truthful transparency, enforce accountability and master cybersecurity to stay ahead of threats. Bring your bold ideas and fearless risk-taking to redefine connectivity and transform how the world shares stories and experiences that matter. When you step into a career with AT&T, you won’t just imagine the future-you’ll create it.

Job Summary: The Principal Cybersecurity Attack Surface Management Infrastructure Detective will be responsible for the effective discovery, attribution, and documentation of the internal attack surface. This role requires, a strong understanding of attack surfaces, and the ability to develop and implement robust security strategies. The ideal candidate will have extensive experience in inventory management, security best practices, and a proactive approach to threat detection and response.

Key Responsibilities:

• Conduct thorough assessments of attack surfaces and identify areas of risk using various tools.
• Develop and enforce security policies, standards, and best practices for attack surface management.
• Monitor and analyze data from attack surface management tools to detect and respond to security incidents.
• Stay current with the latest trends, threats, and technologies in attack surface management.
• Conduct training and awareness programs on attack surface management for network and security teams.
• Prepare and present detailed reports on attack surface management posture and incident response activities.
• Work with AI technologies, including training Large Language Models (LLM) and utilizing Retrieval-Augmented Generation (RAG).

Qualifications:

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field. A master's degree is preferred.
• Minimum of 8-10 years of experience in cybersecurity, with a focus on attack surface management and tool operations.
• Strong knowledge of attack surface management tools, including Xpanse, Censys, and others such as:
• Xpanse and Censys: For identifying devices and services exposed to the internet.
• Armis: For digital footprint and attack surface analysis.
• Tenable: For continuous monitoring and vulnerability management.
• Proven experience in identifying and mitigating attack surface risks and vulnerabilities.
• Excellent analytical, problem-solving, and communication skills.
• Ability to work effectively in a collaborative, fast-paced environment.
• Relevant certifications such as CISSP, CEH, or equivalent are highly desirable.
• Development experience in Python, JavaScript, Bash Scripting, C/C+/C#, or GO desired.
• Proficiency in network monitoring tools (Wireshark, Netflow, sFlow).

Desired Skills:

• Experience with web applications and web application firewalls.
• Understanding of web application/site APIs, i.e. REST method.
• Experience with AI technologies (LLM, RAG).

#LI-Onsite – Full-time office role

This position requires office presence of a minimum of 5 days per week and is only located in the location(s) posted. No relocation is offered.

The Principal Cybersecurity earns between $141,300.00-$211,900.00 USD Annual, not to mention all the other amazing rewards that working at AT&T offers. Individual starting salary within this range may depend on geography, experience, expertise, and education/training.

Joining our team comes with amazing perks and benefits:

• Medical/Dental/Vision coverage.

• 401(k) plan

• Tuition reimbursement program.

• Paid Time Off and Holidays (based on date of hire, at least 23 days of vacation each year and 9 company-designated holidays)

• Paid Parental Leave.

• Paid Caregiver Leave.

• Additional sick leave beyond what state and local law require may be available but is unprotected.

• Adoption Reimbursement.

• Disability Benefits (short term and long term)

• Life and Accidental Death Insurance.

• Supplemental benefit programs: critical illness/accident hospital indemnity/group legal.

• Employee Assistance Programs (EAP)

• Extensive employee wellness programs.

• Employee discounts up to 50% off on eligible AT&T mobility plans and accessorie