{"id":1673607,"url":"https://alion.io/job/key-com-senior-exposure-management-engineer","title":"Senior Exposure Management Engineer","company":{"id":450627,"name":"KeyBank","domain":"key.com","url":"https://alion.io/company/key-com","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":81,"open_postings":22,"ghost_share":0,"stale_share":0.773,"repost_share":0,"time_to_fill_p50_days":25,"computed_at":"2026-10-13T05:45:00Z"}},"role":"Industrial Engineering","role_family":"Industrial Engineering","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Brooklyn, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":96000,"max":181000,"currency":"USD","period":"year","gross":null,"usd_annual":181000},"salary_estimate":null,"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CIS Benchmarks","optional":false},{"name":"GCP","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"NIST CSF","optional":false},{"name":"Qualys Cloud Platform","optional":false},{"name":"Red Teaming","optional":false},{"name":"ServiceNow","optional":false}],"status":"live","first_seen_at":"2026-09-15T00:00:00Z","employer_posted_date":"2026-09-15","last_verified_at":"2026-10-13T20:34:01Z","board_verified":true,"closed_at":null,"days_open":28,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":28},"description":"Location:\n4910 Tiedeman Road, Brooklyn OhioPosition Summary\nAs a member of the Cyber Defense team within Corporate Information Security, the Senior Exposure Management Engineer is responsible for governing, assessing, and maintaining enterprise security baseline standards across on-premises, cloud, and hybrid environments. This role ensures technology assets remain aligned with approved security configuration standards, industry frameworks, and regulatory requirements through continuous assessment, compliance monitoring, and risk-based remediation activities.\nThe Senior Exposure Management Engineer leverages automated assessment and compliance validation tools to identify configuration weaknesses, measure adherence to enterprise security baselines, and monitor configuration drift across the environment. The role partners closely with Security Architecture, Infrastructure, Engineering, Cloud, and Application teams to drive remediation, manage exceptions, support audit and regulatory examinations, and enhance the organization's overall security posture through consistent application of standards-based controls.\nThis position also leads the evolution of the enterprise baseline program by evaluating changes to industry guidance, improving compliance measurement capabilities, expanding automation, and providing actionable reporting that enables informed risk-based decisions and continuous exposure reduction\nKey Responsibilities\nSecurity Baseline GovernanceMaintain and govern enterprise-approved security baseline standards across operating systems, cloud platforms, applications, databases, and network infrastructure.\nSupport the review and adoption of updates to CIS Benchmarks and other industry-recognized security standards through established governance processes.\nPartner with Security Architecture and technology teams to ensure baseline requirements are appropriately documented, communicated, and operationalized.\n\nConfiguration Compliance AssessmentConduct ongoing configuration compliance assessments utilizing automated scanning and validation tools to measure adherence to approved baseline standards.\nValidate remediation activities through continuous monitoring and reassessment.\nIdentify, analyze, and report configuration weaknesses that increase organizational risk.\n\nConfiguration Drift MonitoringMonitor configuration drift across enterprise assets and provide reporting on deviations from approved security baselines.\nPartner with technology owners to investigate non-compliant configurations and drive timely remediation.\n\nException and Risk ManagementManage baseline exceptions, compensating controls, and risk acceptance documentation.\nEnsure approved deviations from security standards are appropriately documented, reviewed, and tracked through remediation or renewal cycles.\n\nCompliance Reporting & MetricsDevelop and maintain configuration compliance metrics, dashboards, and executive reporting.\nProvide visibility into compliance trends, remediation progress, assessment coverage, and risk reduction activities.\nSupport reporting through ServiceNow and other enterprise governance platforms.\n\nAudit & Regulatory SupportMaintain documentation, evidence, and reporting required to support internal audits, external examinations, and regulatory assessments.\nDemonstrate compliance with enterprise security requirements, industry standards, and applicable regulatory obligations.\n\nCross-Functional CollaborationPartner with Infrastructure, Cloud, Application, Engineering, and Security teams to support implementation and maintenance of approved security baselines.\nProvide guidance regarding baseline compliance requirements and remediation priorities.\n\nContinuous Improvement & AutomationIdentify opportunities to improve assessment coverage, compliance measurement, reporting, and operational efficiencies through automation.\nSupport implementation of automated compliance validation and reporting capabilities.\n\nThreat-Informed Exposure ReductionCollaborate with Vulnerability Management, Threat Intelligence, Red Team, and Exposure Management teams to prioritize remediation of configuration weaknesses that contribute to exploitable attack paths and elevated risk.\nUtilize risk-based methodologies to focus remediation efforts on the highest-impact configuration deficiencies.\n\nKnowledge SharingShare security baseline best practices, emerging standards, and compliance requirements through documentation, training, and stakeholder engagement.\n\nRequired Qualifications\nBachelor’s degree in computer science, Cybersecurity, or related field-or equivalent experience.\n8+ years of experience in security engineering, configuration management, or related roles.\nExperience with Vulnerability Management platforms (Tenable, Qualys, Rapid7 etc) running vulnerability scans, monitoring agent health, and maintaining scanner operability.\nComprehensive expertise in Tenable or comparable vendor solutions for compliance scanning.\nBroad understanding of enterprise computing platforms and their configuration management, compliance, and security considerations.\nHands-on experience with cloud platforms (Google Cloud, Microsoft Azure, AWS).\nFamiliarity with security frameworks and standards (e.g., CIS Benchmarks, SCAP, NIST CSF, MITRE ATT&CK).\nExperience with ServiceNow security related modules such as Vulnerability Response & Configuration Compliance\nEffective research, documentation, and reporting skills.\nWillingness to travel.\nPreferred Certifications\nCertified Information Systems Security Professional (CISSP)\nGIAC Security Essentials (GSEC)\nGIAC Certified Vulnerability Assessor (GCVA)\nMicrosoft Certified: Azure Security Engineer Associate\nAWS Certified Security - Specialty\nGoogle Cloud Security Engineer\nCOMPENSATION AND BENEFITS\nThis position is eligible to earn a base salary in the range of $96,000.00 - $181,000.00 annually. Placement within the pay range may differ based upon various factors, including but not limited to skills, experience and geographic location. Compensation for this role also includes eligibility for incentive compensation which may include production, commission, and/or discretionary incentives.Please click here for a list of benefits for which this position is eligible.\nKey has implemented an approach to employee workspaces which prioritizes in-office presence, while providing flexible options in circumstances where roles can be performed effectively in a mobile environment.\nJob Posting Expiration Date: 10/30/2026\n\nKeyCorp is an Equal Opportunity Employer committed to sustaining an inclusive culture. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, genetic information, pregnancy, disability, veteran status or any other characteristic protected by law.Qualified individuals with disabilities or disabled veterans who are unable or limited in their ability to apply on this site may request reasonable accommodations by emailing .\n#LI-Hybrid","description_format":"text","description_chars":7088,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Financial Services","Professional Services","Commercial & Retail Banks","Consumer Loans & Pawnshops"],"lifecycle":[{"event":"open","at":"2026-10-02T07:33:54Z"}],"visa":[],"liveness":{"score":29,"band":"fade","label":"Fading","p_open":1,"p_active":0.528,"p_room":0.55,"age_days":28,"expected_fill_days":25,"reasons":["conf:5","stale_co","velocity","win:tail","comp:brand"],"computed_at":"2026-10-13T05:45:00Z"},"pay":{"stated_usd_annual":181000,"is_top_pay":true},"html_url":"https://alion.io/job/key-com-senior-exposure-management-engineer","json_url":"https://alion.io/job/key-com-senior-exposure-management-engineer.json","meta":{"generated_at":"2026-10-13T22:16:07Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":33969,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-14T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":450627},"rest":"https://alion.io/mcp/rest/get_company?id=450627"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fkey-com-senior-exposure-management-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fkey-com-senior-exposure-management-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fkey-com-senior-exposure-management-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/key-com-senior-exposure-management-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fkey-com-senior-exposure-management-engineer"}]}