{"id":117527,"url":"https://alion.io/job/anavation-security-infrastructure-exposure-engineer","title":"Security Infrastructure & Exposure Engineer","company":{"id":5038,"name":"AnaVation","domain":"anavationllc.com","url":"https://alion.io/company/anavation","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Lever","truth_index":{"grade":"B","score":83,"open_postings":3,"ghost_share":0,"stale_share":0.667,"repost_share":0,"time_to_fill_p50_days":55,"computed_at":"2026-10-24T06:02:35Z"}},"role":"DevOps","role_family":"DevOps","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Reston, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":94400,"max":217038,"currency":"USD","period":"year","gross":null,"usd_annual":217038},"salary_estimate":null,"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"GCP","optional":false},{"name":"Okta","optional":false},{"name":"OpenTofu","optional":false},{"name":"Terraform","optional":false},{"name":"ChatGPT","optional":true},{"name":"Claude","optional":true},{"name":"Claude Code","optional":true},{"name":"Go","optional":true},{"name":"OpenAI Codex","optional":true},{"name":"Python","optional":true},{"name":"Rust","optional":true}],"status":"live","first_seen_at":"2026-07-24T18:59:18Z","employer_posted_date":"2026-07-24","last_verified_at":"2026-10-24T16:18:22Z","board_verified":true,"closed_at":null,"days_open":91,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":91},"description":"Description of Task to be Performed:\nThe Security Infrastructure & Exposure Engineer will design, build, and scale our attack surface management and threat exposure detection capabilities. You will engineer internal tools and automated pipelines that proactively map assets, model attack paths, and eliminate security blind spots before they can be exploited.\nCore Responsibilities:\n Attack Surface Management: Architect and maintain Continuous Asset Attack Surface Management (CAASM) solutions for real-time asset discovery.\nAttack Path Modeling: Map network topologies, analyze segmentation, and build automated attack path graphs to identify choke points.\n Telemetry & Correlation: Integrate active/passive scanning data with Identity Provider (IdP) telemetry to pinpoint exposed or unmanaged infrastructure.\n Pipeline Integration: Embed automated vulnerability and exposure testing into Infrastructure-as-Code (IaC) and CI/CD deployment pipelines.\nCloud Architecture Defense: Evaluate and harden complex cloud architectures against emerging exposure techniques.\nPrimary Languages & Technical Stack\nGo, Rust, and Python (at least one required)\nRequired Qualifications:\nClearance: Active TS/SCI Clearance with CI Polygraph \nEducation & Years of Experience: Bachelor’s degree and 8 years of experience related to specific functional area. \n Certifications: Active certifications for both IAT Level II (e.g. CompTIA Security+) and Cyber Security Service Provider (CSSP) Infrastructure Support (e.g. CompTIA Cloud+) by program onboarding date. \nThe following individual certifications cover both certification requirements for this program: CompTIA Cybersecurity Analyst, CySA+; EC-Council Certified Network Defender (CND); GlAC Global Industrial Cyber Security Professional, GICSP; (ISC)2 System Security Certified Practitioner (SCCP). \n Hands-on experience and knowledge with the following:\nAsset Discovery: Proven experience with CAASM tooling and building inventory systems.\nNetwork & Graph Modeling: Deep understanding of network topology, segmentation verification, and graph-based attack path analysis.\nScanning & Identity: Hands-on experience with active/passive network scanning and correlating data with identity registries (e.g., Okta, Azure AD).\nCloud & DevOps: Strong background in cloud security architecture (AWS, GCP, or Azure), IaC (Terraform, OpenTofu), and CI/CD security validation.\nPreferred Qualifications:\nExperience leveraging advanced AI models (e.g., ChatGPT, Grok, Claude) to automate security workflows: (ChatGPT, Grok, Claude, Claude Code, Codex)\nMultiple scripting and development languages\nFamiliarity with developer-focused AI tools like Claude Code or OpenAI Codex to accelerate engineering velocity","description_format":"text","description_chars":2731,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":true,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["National Security","Intelligence","Vulnerability Management","Cloud Consulting & Migration"],"lifecycle":[{"event":"open","at":"2026-07-24T18:59:18Z"}],"visa":[],"liveness":{"score":27,"band":"fade","label":"Fading","p_open":1,"p_active":0.742,"p_room":0.36,"age_days":91,"expected_fill_days":55,"reasons":["conf:2","velocity","win:tail","crowd:"],"computed_at":"2026-10-24T06:02:35Z"},"pay":{"stated_usd_annual":217038,"is_top_pay":true},"html_url":"https://alion.io/job/anavation-security-infrastructure-exposure-engineer","json_url":"https://alion.io/job/anavation-security-infrastructure-exposure-engineer.json","meta":{"generated_at":"2026-10-24T18:19:30Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":26671,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-25T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":5038},"rest":"https://alion.io/mcp/rest/get_company?id=5038"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fanavation-security-infrastructure-exposure-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fanavation-security-infrastructure-exposure-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fanavation-security-infrastructure-exposure-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/anavation-security-infrastructure-exposure-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fanavation-security-infrastructure-exposure-engineer"}]}