Global Lead, Attack Surface Management (fmd)

Bring more to life.

At Danaher our work saves lives. And each of us plays a part. Fueled by our culture of continuous improvement we turn ideas into impact innovating at the speed of life.

Our 60000 associates work across the globe at more than 15 unique businesses within life sciences diagnostics and biotechnology.

Are you ready to accelerate your potential and make a real difference At Danaher you can build an incredible career at a leading science and technology company where were committed to hiring and developing from within. Youll thrive in a culture of belonging where you and your unique viewpoint matter.

Learn about the Danaher Business System which makes everything possible.

At Danaher the Global Lead Attack Surface Management owns the ASM/EASM/CAASM capability discovery attribution asset ownership risk prioritization and cross-functional remediation across internet-facing internal cloud SaaS subsidiary and third-party surfaces. Enterprise strategy is set by leadership; the Global Lead shapes and refines the ASM strategy then owns operationalizing it as part of CTEM. The Global Lead works independently and drives remediation across teams that each own their own assets.

This position reports to the Senior Manager Exposure Management (CTEM) and is part of the Danaher Information Security (DIS)locatedin Krakow Poland and will be an on-site role.

This is a Danaher Corporate role hosted by our Cytiva operating company in Kraków.

In this role you will have the opportunity to:

• Architect the ASM operating model: outside-in discovery attribution asset-ownership workflows and risk prioritization feeding CTEM.

• Engineer/automate discovery correlation and enrichment (APIs scripting) across EASM/CAASM DNS certificate transparency and CMDB sources.

• Design integration blueprints connecting asset visibility to vulnerability threat intel and remediation platforms.

• Design the sustainability & governance model: ownership assignmentremediationSLAs and external-hygiene control checks.

The essential requirements of the job include:

• Bachelors degree in Cybersecurity Computer Science Information Technology Engineering or related field.

• Extensive cybersecurity experience (7-9 years preferably) with a focus on attack surface management exposure management or offensive/recon security (GCRF P4 Bachelors-track minimum; recommended pending Comp sign-off).

• Experience leading or operating enterprise ASM/EASM/CAASM discovery attribution and remediation governance across internet-facing cloud and third-party surfaces.

• Hands-on experience with ASM platforms and reconnaissance tooling (such as CortexXpanse Defender EASMCyCognitoCensys or Shodan) and internet fundamentals (TCP/IP DNS TLS/certificates domains).

• Experience working independently to drive asset ownership and remediation across infrastructure cloud and third-party teams and reporting external risk to stakeholders.

It would be a plus if you alsopossesspreviousexperience in:

• Experience with digital risk protection or M&A/subsidiary security integration.

• Scripting for API integration and automation (Python preferred).

• CISSP CISM OSCP CRTO GCIH GIAC (GOSI/GPEN/GSEC) or avendorASM/CAASM certification.

#LI-KK1