Attack Surface Management Expert

Attack Surface Management Expert (m/f/d) at Allianz Services Allianz Services is part of Allianz Group, one of the world’s leading insurers and asset managers. With more than 8,000 employees across ten countries and four continents, Allianz Services delivers superior client experiences and is deeply committed to compassion, integrity, and excellence. Role Overview The Attack Surface Management Expert is a key member of our Digital Resilience as a Service framework. You will collaborate closely with Group Information Security and Allianz Technology to ensure consistent security execution, provide reliable risk insights, and align with Group‑wide security policies and standards. What You Do Engage with senior security, IT, and business stakeholders to align ASM initiatives with organizational risk priorities. Present ASM findings, risk assessments, and remediation progress to technical and non‑technical audiences, ensuring clarity and actionable outcomes. Continuously identify and maintain visibility of externally exposed systems, services, domains, and cloud resources across all business units and geographies. Establish processes for ongoing asset discovery and inventory, ensuring comprehensive coverage of the organization’s digital footprint. Operate, fine‑tune, and optimize ASM platforms and tools. Integrate ASM solutions with vulnerability management, threat intelligence, and incident response workflows to enhance automation and efficiency. Validate identified risks and exposures, ensuring accuracy and relevance. Work closely with IT, DevOps, and application owners to facilitate timely mitigation, track remediation progress, and resolve issues. Develop and maintain dashboards to visualize ASM findings, trends, and remediation status for executives and operational teams. Regularly report on key metrics such as asset inventory completeness, exposure trends, remediation SLAs, and risk reduction progress. What You Bring Higher education degree in Information Security, Computer Science, Engineering, or a related technical or quantitative field. Hands‑on experience in attack surface management, including discovery, vulnerability identification, remediation processes, and IT operations (e.g., patch management, configuration management, infrastructure support). Familiarity with internet‑facing systems, cloud infrastructures (IaaS/PaaS/SaaS), domain and certificate management, and ad‑network perimeter configuration. Excellent teamwork and communication skills, with the ability to work cross‑functionally and engage stakeholders across IT and security teams. Good English skills (written and spoken); additional languages welcome. We highly welcome candidates with a genuine interest and affinity for Information Technology (IT) and Generative Artificial Intelligence (GenAI), as these attributes are considered valuable assets to our team. What We Offer A hybrid work model recognizing the value of in‑ collaboration and remote working, including up to 25 days per year working from abroad. A performance‑rewarding compensation and benefits package that includes a company bonus scheme, pension, employee shares program, and multiple employee discounts (details vary by location). From career development and digital learning programs to international career mobility, we offer lifelong learning for our employees worldwide and an environment where innovation, delivery, and empowerment are fostered. Flexible working, health and wellbeing offers (including healthcare and parental leave benefits) to support balance and help people return from career breaks with experience that nothing else can teach. Employment Details Seniority level: Mid‑Senior level Employment type: Full‑time Job function: Other Industries: Financial Services & Insurance We are an equal‑opportunity employer. We welcome and encourage applications from people of all ages, sexes, nationalities, religions, languages, and backgrounds. All applicants will be considered regardless of ethnicity, gender, language, or as a qualified person with a disability, with knowledge of sexual orientation, nationality, religion, gender, sexual orientation (LGBTQ). #J-18808-Ljbffr