Senior Security Engineer – Attack Surface Management

Location:

As a member of the Cyber Defense team within Corporate Information Security, the Senior Exposure Management Engineer is responsible for leading the continuous identification, inventory, monitoring, and reduction of KeyBank’s digital and physical attack surface. This role drives the ASM strategy across cloud, and on-premises environments, combining external threat visibility with internal exposure reduction. The engineer oversees asset discovery, vulnerability management, and exposure monitoring, ensuring exploitable weaknesses are rapidly identified, prioritized, and remediated based on threat intelligence and business impact. The role involves close collaboration with cross-functional teams to align ASM initiatives with organizational risk priorities and regulatory requirements.

Key Responsibilities