{"id":3275550,"url":"https://alion.io/job/mtn-group-manager-security-engineer-vulnerability-and-external-attack-surface-management","title":"Manager - Security Engineer Vulnerability and External Attack Surface Management","company":{"id":57356,"name":"MTN Group","domain":"mtn.com","url":"https://alion.io/company/mtn-group","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Oracle","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Roodepoort, South Africa"],"countries":["ZA"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":27000,"max_usd":61000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":2372},"experience_years_min":6,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"Anthropic","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Claude","optional":false},{"name":"Claude Code","optional":false},{"name":"CVSS","optional":false},{"name":"EPSS","optional":false},{"name":"GCP","optional":false},{"name":"KEV","optional":false},{"name":"LLM","optional":false},{"name":"Machine Learning","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"Power BI","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Qualys Cloud Platform","optional":false},{"name":"Shodan","optional":false},{"name":"SQL","optional":false}],"status":"live","first_seen_at":"2026-10-26T08:45:56Z","employer_posted_date":"2026-10-26","last_verified_at":"2026-11-01T05:07:14Z","board_verified":true,"closed_at":null,"days_open":5,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":5},"description":"The Security Engineer - Vulnerability & EASM (External Attack Surface Management) owns the end-to-end identification, prioritization, and remediation of vulnerabilities across MTN’s internal estate and external-facing attack surface. MTN Group’s Security Operations Centre (SOC) is strengthening its proactive defense capability\nBeyond running the vulnerability management lifecycle, this is a forward-looking technical role that applies data analysis, threat intelligence, and emerging agentic-AI techniques to move the SOC from reactive patching to predictive, risk-driven exposure management.\nContext\nMTN's Ambition 2030 strategy is focused on leading digital solutions for Africa's progress by accelerating platform growth, advancing digital and financial inclusion, enabling sustainable connectivity, and building a resilient, future-fit organisation. As MTN continues its evolution into a digital platform business, Information Security plays a critical role in safeguarding customer trust, protecting digital services, enabling innovation, and ensuring operational resilience across MTN's diverse markets.\nThe Group Information Security function must therefore ensure the successful delivery of its mandate in the context of:\nSupporting MTN's Ambition 2030 vision to be the leading platform business and digital solutions provider for Africa.\n\nAccelerating digital transformation, cloud adoption, AI enablement, fintech expansion, digital services, and platform ecosystems across the Group.\n\nProtecting MTN's rapidly expanding digital assets, customer data, financial platforms, and critical technology infrastructure.\n\nManaging the geographic complexity of MTN's footprint across Africa and the Middle East, encompassing varying regulatory, political and cyber risk environments.\n\nMaintaining stakeholder confidence by meeting the expectations of customers, shareholders, regulators, partners, and communities.\n\nEnabling sustainable growth through secure digital innovation and the adoption of emerging technologies, including Artificial Intelligence.\n\nAchieving operational excellence through standardised security processes, automation, intelligence-led decision-making, and continuous improvement.\n\nAddressing an increasingly sophisticated and rapidly evolving cyber threat landscape targeting telecommunications operators, financial services, digital platforms, and critical infrastructure.\n\nEnsuring business continuity, cyber resilience, and operational stability across a highly interconnected technology ecosystem.\n\nDelivering integrated cyber defence capabilities across network, cloud, IT, digital, financial services, and enterprise environments.\n\nStrengthening proactive threat intelligence, threat hunting, detection, response, and cyber risk management capabilities.\n\nSupporting regulatory compliance and data protection requirements across multiple jurisdictions.\n\nEnhancing MTN's reputation as a trusted, secure, and responsible digital operator.\n\nLeveraging automation, machine learning, and AI-driven security capabilities to improve cyber defence effectiveness and operational efficiency.\n\nEmbedding a culture of security awareness, accountability, and resilience across MTN Group and its Operating Companies.\n\nIn this environment, the Information Security function is required to provide timely, actionable, and business-relevant intelligence that enables MTN to anticipate emerging threats, proactively manage cyber risks, and support the achievement of Ambition 2030 objectives.\nValues\nWe at MTN are a purpose and value-led organization. At MTN, we believe that understanding our people’s needs and aspirations is key to creating experiences that delight you at work, everyday. We are committed to fostering an environment where every member of our Y’ello Family is heard, understood and empowered to live an inspired life.\nOur values keep us grounded and moving in the right direction. Most importantly, they keep us honest. It is not something we claim to be. It is in our DNA.\nAs an organisation, we consider it our mission to create an exciting and rewarding place to work, where our people can be themselves, thrive in positivity and ignite their full potential. A workplace that boosts creativity and innovation, improves productivity, and ultimately drives meaningful results. A workplace that is built on relationships and achieving a purpose that is bigger than us.\nOur commitments go beyond an organisational promise. It is in our leadership and managerial ethos to meaningfully partner with our employees, customers and stakeholders with a vision to realise our shared goals.\nLive Y’ello\nLead with Care\n\nCan-do with Integrity\n\nCollaborate with Agility\n\nServe with Respect\n\nAct with Inclusion\n\n The Security Engineer - Vulnerability & EASM (External Attack Surface Management) will be responsible for the following:\nVulnerability Management (core)\nManage the vulnerability management lifecycle - discovery, validation, prioritization, remediation tracking and verification - across infrastructure, cloud, applications and telecom/OT assets.\n\nOperate and tune enterprise vulnerability scanning platforms (e.g., Tenable, Qualys), ensuring complete and accurate asset coverage.\n\nDefine and enforce risk-based remediation SLAs; partner with infrastructure, application and platform teams to drive closure.\n\nMaintain authoritative vulnerability and asset inventories, reducing false positives through validation and contextual enrichment.\n\nExternal Attack Surface Management (EASM)\nContinuously discover, map and monitor MTN’s internet-facing assets - including shadow IT, exposed services, certificates, domains and cloud footprints.\n\nOperate EASM tooling (e.g., Microsoft Defender EASM, Shodan) to surface exposure before adversaries do.\n\nCorrelate external exposure with internal vulnerability and threat data to produce a unified, prioritized view of organizational risk.\n\nDrive rapid remediation of high-risk external exposures and unauthorized or unmanaged assets.\n\nPractical Risk & Remediation\nTranslate technical findings into business risk - prioritizing by exploitability (CVSS, EPSS, CISA KEV), asset criticality and threat context, not raw vulnerability counts.\n\nRecommend pragmatic, achievable remediation and compensating controls; avoid unmanageable “boil-the-ocean” backlogs.\n\nLead targeted remediation campaigns and track measurable reductions in exploitable risk over time.\n\nThreat Analysis & Forward-Looking Defence\nIntegrate threat intelligence to contextualize vulnerabilities against active exploitation and threat-actor behavior.\n\nAnticipate emerging exposure - new CVEs, attack techniques, supply-chain and cloud risks - and proactively assess MTN’s susceptibility.\n\nContribute to detection, hardening and resilience improvements informed by attacker tradecraft (MITRE ATT&CK).\n\nAI-Driven Innovation & Thought Leadership\nPioneer the use of agentic AI and large-language-model platforms (e.g., Anthropic Claude / Claude Code or equivalent) to automate vulnerability triage, enrichment, remediation guidance and reporting.\n\nDesign and prototype AI-assisted workflows that scale VM and EASM operations across MTN’s Group markets.\n\nStay ahead of developments in AI, offensive tooling and exposure management, bringing best practice into the team\n\n Qualifications:\nBachelor’s degree in Computer Science, Information Security, Engineering or a related field - or equivalent practical experience.\n\n6+ years in information security, with at least 3-4 years dedicated to vulnerability management and/or attack surface management.\n\nDemonstrable experience operating enterprise VM and EASM tooling at scale.\n\nHands-on scripting/automation (Python, PowerShell) and data analysis capability.\n\nProven track record of driving measurable risk-reduction and remediation outcomes.\n\nExposure to AI / agentic-AI tooling applied to security operations - strongly preferred\n\nPreferred Certifications:\nOSCP, GIAC (e.g., GWAPT, GEVA, GCTI), CISSP, CEH or equivalent.\n\nCloud security certifications (e.g., AZ-500, AWS Security Specialty, CCSP).\n\nTechnical Skills & Tools:\nVulnerability management: Tenable / Qualys or equivalent.\n\nAttack surface management: Microsoft Defender EASM / Shodan or equivalent.\n\nPrioritization frameworks: CVSS, EPSS, CISA KEV.\n\nThreat frameworks: MITRE ATT&CK; threat-intelligence integration.\n\nCloud security: Azure / AWS / GCP exposure management.\n\nData & automation: Python, SQL, Power BI, SOAR / workflow automation.\n\nAI: agentic-AI / LLM platforms (Anthropic Claude / Claude Code or equivalent); prompt and workflow design.\n\nBehavioural Competencies:\nForward-thinking and curious - anticipates rather than reacts.\n\nStrong communicator who translates technical risk for non-technical audiences.\n\nPragmatic problem-solver focused on real-world, achievable remediation.\n\nCollaborative, with the credibility to influence across teams and markets.\n\nSelf-driven thought leader who raises the capability of those around them.","description_format":"text","description_chars":8986,"description_truncated":false,"requirements":{"experience_years_min":6,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":true},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Vulnerability Management","Payment Processing & Gateways","Telecom Infrastructure","Information Security"],"lifecycle":[{"event":"open","at":"2026-10-26T14:35:18Z"}],"visa":[],"liveness":{"score":67,"band":"ok","label":"Likely open","p_open":1,"p_active":0.847,"p_room":0.788,"age_days":5,"expected_fill_days":8,"reasons":["conf:1","velocity","win:late"],"computed_at":"2026-11-01T06:10:25Z"},"pay":null,"html_url":"https://alion.io/job/mtn-group-manager-security-engineer-vulnerability-and-external-attack-surface-management","json_url":"https://alion.io/job/mtn-group-manager-security-engineer-vulnerability-and-external-attack-surface-management.json","meta":{"generated_at":"2026-11-01T08:07:59Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":12654,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-02T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":57356},"rest":"https://alion.io/mcp/rest/get_company?id=57356"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fmtn-group-manager-security-engineer-vulnerability-and-external-attack-surface-management"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fmtn-group-manager-security-engineer-vulnerability-and-external-attack-surface-management"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fmtn-group-manager-security-engineer-vulnerability-and-external-attack-surface-management"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/mtn-group-manager-security-engineer-vulnerability-and-external-attack-surface-management\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fmtn-group-manager-security-engineer-vulnerability-and-external-attack-surface-management"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3275550}},{"tool":"search_jobs","arguments":{"company":"mtn.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3275550},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}