Lead Cybersecurity Attack Surface Management

About the Company:

Join AT&T and reimagine the communications and technologies that connect the world. Our Chief Security Office ensures that our assets are safeguarded through truthful transparency, enforce accountability and master cybersecurity to stay ahead of threats. Bring your bold ideas and fearless risk-taking to redefine connectivity and transform how the world shares stories and experiences that matter. When you step into a career with AT&T, you won’t just imagine the future-you’ll create it.

About the Job:

This position is a Lead Cyber Security to perform Attack Surface Management and will be responsible for the effective discovery, attribution, and documentation of the internal attack surface. This role requires, a strong understanding of attack surfaces, and the ability to develop and implement robust security strategies. The ideal candidate will have extensive experience in inventory management, security best practices, and a proactive approach to threat detection and response.

Experience Level: 12+ years

Location: Hyderabad or Bengaluru

Roles and Responsibilities:

• Conduct thorough assessments of attack surfaces and identify areas of risk using various tools.
• Develop and enforce security policies, standards, and best practices for attack surface management.
• Monitor and analyze data from attack surface management tools to detect and respond to security incidents.
• Stay current with the latest trends, threats, and technologies in attack surface management.
• Conduct training and awareness programs on attack surface management for network and security teams.
• Prepare and present detailed reports on attack surface management posture and incident response activities.
  
  
  

Primary / Mandatory skills:

• 12+ years of Proven experience in cybersecurity, with a focus on attack surface management and tool operations.
• 8+ years of experience with Strong knowledge of attack surface management tools, such as:
• Xpanse and Censys: For identifying devices and services exposed to the internet.
• Armis: For digital footprint and attack surface analysis.
• Tenable: For continuous monitoring and vulnerability management.
  
• Proven experience in identifying and mitigating attack surface risks and vulnerabilities.
• Excellent analytical, problem-solving, and communication skills.
• Ability to work effectively in a collaborative, fast-paced environment.
• Proficiency in network monitoring tools (i.e. Wireshark).
• Experience in Network routing protocols, specifically BGP from an Internet perspective.
• Bachelor’s degree in computer science, Information Technology, Cybersecurity, or a related field.
  
  

Desired Skills:

• Experience with web applications and web application firewalls.
• Understanding of web application/site APIs, i.e. REST method.
• Development experience in Python, Bash Scripting, or GO desired.
• Experience with reporting platforms, Power BI, Data Bricks.
  
  
  

Additional information (if any): Flexible to provide coverage in US morning hours upon need.

Certification: Relevant certifications such as CISSP or CCSP or equivalent are highly desirable.

• Familiarity with applying Artificial Intelligence (AI) or Machine Learning (ML) techniques in cybersecurity contexts (e.g., anomaly detection, threat hunting, behavioral analytics, or risk scoring).
• Experience leveraging AI-enabled tools (such as Copilot for Security, Darktrace, CrowdStrike Charlotte AI, or custom LLM integrations) to enhance detection, response, and automation workflows.
• Understanding of LLM safety, prompt engineering, or AI governance frameworks (e.g., NIST AI RMF, EU AI Act readiness) is a plus.
• Exposure to data science fundamentals relevant to security (pattern recognition, supervised vs. unsupervised learning, model validation).
• Awareness of AI-driven risks (e.g., adversarial ML, data poisoning, model hallucination) and their mitigation within enterprise environments.
• Interest in leveraging GenAI for security operations, such as summarizing alerts, drafting reports, or automating incident triage.
  
  
  

Weekly Hours:

40

Time Type:

Regular

Location:

IND:AP:Hyderabad / Argus Bldg 4f & 5f, Sattva, Knowledge City- Adm: Argus Building, Sattva, Knowledge City

It is the policy of AT&T to provide equal employment opportunity (EEO) to all persons regardless of age, color, national origin, citizenship status, physical or mental disability, race, religion, creed, gender, sex, sexual orientation, gender identity and/or expression, genetic information, marital status, status with regard to public assistance, veteran status, or any other characteristic protected by federal, state or local law. In addition, AT&T will provide reasonable accommodations for qualified individuals with disabilities. AT&T is a fair chance employer and does not initiate a background check until an offer is made.