Hiring: Senior Exposure Management Engineer Company: KeyBank Location: Brooklyn, OH Job Posted Time: 2026-09-16 11:11:02 Employment Type: Hybrid Target Skills & Keywords : AWS, Azure, Configuration Management, GCP, Risk Management, ServiceNow About the job Experience: •8+ years of experience in security engineering, configuration management, or related roles. Required Skills: •This position also leads the evolution of the enterprise baseline program by evaluating changes to industry guidance, improving compliance measurement capabilities, expanding automation, and providing actionable reporting that enables informed risk-based decisions and continuous exposure reduction •Maintain and govern enterprise-approved security baseline standards across operating systems, cloud platforms, applications, databases, and network infrastructure. •Actively facilitate and support review and adoption of updates to CIS Benchmarks and other industry-recognized security standards through established governance processes. •Partner with Security Architecture and technology teams to ensure baseline requirements are appropriately documented, communicated, and operationalized. •Conduct ongoing configuration compliance assessments utilizing automated scanning and validation tools to measure adherence to approved baseline standards. •Validate remediation activities through continuous monitoring and reassessment. •Identify, analyze, and report configuration weaknesses that increase organizational risk. •Monitor configuration drift across enterprise assets and provide reporting on deviations from approved security baselines. Qualifications: •Bachelor’s degree in computer science, Cybersecurity, or related field—or equivalent experience. •Comprehensive expertise in Tenable or comparable vendor solutions for compliance scanning. •Broad understanding of enterprise computing platforms and their configuration management, compliance, and security considerations. •Applied hands-on capability in cloud platforms (Google Cloud, Microsoft Azure, AWS). •Operational familiarity with security frameworks and standards (e.g., CIS Benchmarks, SCAP, NIST CSF, MITRE ATT\&CK). •Effective research, documentation, and reporting skills. •Certified Information Systems Security Professional (CISSP) •GIAC Certified Vulnerability Assessor (GCVA) •Microsoft Certified: Azure Security Engineer Associate Compensation: •$96,000 - $181,000 / year Interested candidates, please apply directly through the job posting on company's career page or try via AI auto apply on this platform. Don't miss this opportunity to join a forward-thinking team!