Location: Louisville, Kentucky
Job Category: Information Systems
Job ID: 157388
Facility Group: Norton System Services
Job Description

Responsibilities

The Sr Exposure Management Engineer leads the development of risk-based exposure models and the integration of vulnerability, asset and detection telemetry across Norton Healthcare's hybrid environment. This role creates prioritization logic, automates workflows, correlates threat intelligence with asset data, and works with engineering and detection teams to reduce real-world risk. The engineer evaluates vulnerabilities through a threat-informed lens, incorporating asset criticality, exploitability, detection coverage and business impact. The Sr Exposure Management Engineer drives automation, enhances asset intelligence, supports incident response with exposure context, and advances the maturity of the exposure management program.

Qualifications

Required:

• With a Bachelor degree - Five years of experience in cybersecurity vulnerability management, detection engineering or threat intelligence, with demonstrated experience correlating exposure data across multiple platforms. Strong understanding of vulnerability scoring systems (CVSS, EPSS), exploit data sources, asset classification, detection telemetry and hybrid infrastructure. Experience with automation, scripting or data modeling (Python, PowerShell, KQL, or similar).
• Without a Bachelor degree - Seven years of the above.

Desired:

• Seven years of experience in cybersecurity vulnerability management, detection engineering or threat intelligence, with demonstrated experience correlating exposure data across multiple platforms. Strong understanding of vulnerability scoring systems (CVSS, EPSS), exploit data sources, asset classification, detection telemetry and hybrid infrastructure. Experience with automation, scripting or data modeling (Python, PowerShell, KQL, or similar).
• SC-100, GSOA or GOSI, CISSP, Relevant vendor or platform certifications.

Need help finding the right job?

Sign up to receive email alerts on jobs and opportunities!

Screening requirements:

• Background check
• License & education verification
• Employment reference verification
• Drug Screen

Norton Healthcare offers a competitive benefit package, including:

• Paid vacation, sick days and holidays
• Paid parental leave
• 403b/401k retirement plan
• View more: Benefits Guide
• Medical, Dental, and Vision Insurance

Discover meaningful career opportunities at NortonHealthcareCareers.com.
Norton Healthcare Careers - Together, We Will.

Norton Healthcare is a leader in serving adult and pediatric patients from throughout Greater Louisville, Southern Indiana, the commonwealth of Kentucky and beyond. The not-for-profit hospital and health care system is Louisville's second largest employer, with more than 20,000 employees.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.

Norton Healthcare strives to make the Norton Healthcare Careers site accessible to all job seekers. If you're a candidate with a disability, we will make reasonable efforts to accommodate your needs during the application process.

If you have a disability and need to request a reasonable accommodation, email recruitment@nortonhealthcare.org

Equal Employment Opportunity is the law.