Lead Cybersecurity Engineer – Attack Surface Management (Discovery)

This position requires office presence of a minimum of 5 days per week and is only located in the location(s) posted. No relocation is offered.

Join AT&T and reimagine the communications and technologies that connect the world. Our Chief Security Office ensures that our assets are safeguarded through truthful transparency, enforce accountability and master cybersecurity to stay ahead of threats. Bring your bold ideas and fearless risk-taking to redefine connectivity and transform how the world shares stories and experiences that matter. When you step into a career with AT&T, you won’t just imagine the future-you’ll create it.

AT&T’s Cybersecurity organization is building and expanding its Attack Surface Management (ASM) program. The Cybersecurity Engineer – Attack Surface Management (Discovery) role supports the identification, validation, and documentation of AT&T’s internal and external digital attack surface.

This role focuses on discovering internet-facing and internal assets, validating ownership and exposure, and producing high-confidence data that enables enterprise risk reduction. It is a hands-on engineering role combining discovery tooling, network and application knowledge, automation, and collaboration with partner security teams.

What You’ll Do

• Perform continuous attack surface discovery and enumeration across internal and external environments
• Identify and validate domains, subdomains, IP ranges, services, ports, certificates, and exposed applications
• Operate and enhance discovery scanning using enterprise security platforms
• Correlate discovery data with internal asset inventories to confirm ownership and business context
• Support application and web exposure discovery, including coordination with Web Application Firewall (WAF) and application teams
• Share validated findings with partner teams to support remediation and risk reduction
• Improve discovery coverage and accuracy through automation, scripting, and API integrations
• Document discovery processes, workflows, and metrics
• Contribute to dashboards and reporting that communicate attack surface visibility

Required Qualifications

• Experience in cybersecurity engineering, network security, vulnerability management, or attack surface discovery 5-7 years in any discipline
• Hands-on experience with discovery or scanning tools used to identify exposed infrastructure or applications
• Strong understanding of IP addressing, DNS, TLS/certificates, and common internet-facing services
• Ability to analyze and correlate data from multiple technical sources
• Experience with scripting or automation (e.g., Python, REST APIs)
• Strong written and verbal communication skills

Preferred Qualifications

• Experience with Attack Surface Management (ASM) or External Attack Surface Management (EASM) tools
• Experience supporting application, API, or web exposure discovery
• Familiarity with cloud or third-party hosted environments
• Experience building or contributing to security dashboards and metrics
• Experience working in large, complex enterprise environments

Education/Experience:

Bachelor’s degree (BS/BA) desired in Computer Science or Cybersecurity. 5+ years of related experience. Certification is required in some areas.

Supervisor:

No

Our Lead Cybersecurity earns between $141,300-$211,900 USD Annual not to mention all the other amazing rewards that working at AT&T offers. Individual starting salary within this range may depend on geography, experience, expertise, and education/training.

Joining our team comes with amazing perks and benefits:

• Medical/Dental/Vision coverage
• 401(k) plan
• Tuition reimbursement program
• Paid Time Off and Holidays (based on date of hire, at least 23 days of vacation each year and 9 company-designated holidays)
• Paid Parental Leave
• Paid Caregiver Leave
• Additional sick leave beyond what state and local law require may be available but is unprotected
• Adoption Reimbursement
• Disability Benefits (short term and long term)
• Life and Accidental Death Insurance
• Supplemental benefit programs: critical illness/accident hospital indemnity/group legal
• Employee Assistance Programs (EAP)
• Extensive employee wellness programs
• Employee discounts up to 50% off on eligible AT&T mobility plans and accessories,
• AT&T internet (and fiber where available) and AT&T phone.

#LI-Onsite – Full-time office role-

Ready to join our team? Apply today.

Weekly Hours:

Time Type:

Location:

Salary Range:

It is the policy of AT&T to provide equal employment opportunity (EEO) to all persons regardless of age, color, national origin, citizenship status, physical or mental disability, race, religion, creed, gender, sex, sexual orientation, gender identity and/or expression, genetic information, marital status, status with regard to public assistance, veteran status, or any other characteristic protected by federal, state or local law. In addition, AT&T will provide reasonable accommodations for qualified individuals with disabilities.AT&T is a fair chance employer and does not initiate a background check until an offer is made.