The Consultant - Surface Area Management (Vulnerability Management) supports the protection of the organization's digital footprint across on-premises and cloud environments by helping identify, prioritize, and reduce security exposures. This role contributes to vulnerability management, attack surface management, cloud security posture management, and remediation initiatives through technical analysis, collaboration, and continuous improvement efforts. Working under general supervision, the Consultant partners with cybersecurity, cloud platform, infrastructure, engineering, and application teams to improve security posture, increase visibility of enterprise assets, and reduce cyber risk. This role is a professional individual contributor who applies technical expertise to support enterprise security programs and exposure reduction efforts.
Key Accountabilities
- Support enterprise vulnerability and exposure management activities across AWS, Azure, GCP, and OCI environments.
- Analyze CSPM and CNAPP findings and assist in prioritizing remediation based on exposure, business criticality, and risk.
- Identify and promote preventive cloud security controls, including AWS SCPs and Azure Policies by working with different technical teams
- Track remediation activities and collaborate with infrastructure, platform, and application teams to drive vulnerability resolution.
- Assist with security exception reviews, risk acceptance documentation, and remediation governance processes. • Develop and enhance dashboards, reports, automation workflows, and integrations that improve visibility, coverage, and operational efficiency.
- Support cloud identity and access security initiatives, including privileged access management, workload identities, secrets management, and least privilege practices. • Participate in investigations of critical vulnerabilities, zero-day threats, and actively exploited exposures.
- Identify recurring security issues and recommend improvements to scanning coverage, asset visibility, attack surface management, and remediation effectiveness. • Conduct cloud security assessments and security posture reviews and document recommendations for remediation.
- Prepare operational and management reporting to communicate exposure trends, remediation status, and risk metrics.
- Collaborate with Incident Response, Threat Intelligence, Security Architecture, Engineering, and Risk teams to improve security outcomes
Essential Functions
- Vulnerability Management Operations Supports the implementation, operation, and continuous improvement of enterprise vulnerability management capabilities.
- Assists in maintaining standards, processes, metrics, and reporting to reduce organizational risk.
- External Attack Surface Management Monitors and analyzes the organization's external attack surface and works with stakeholders to prioritize and remediate identified exposures.
- Threat-Informed Vulnerability Management Uses threat intelligence, exploitability indicators, and business context to assist with vulnerability prioritization and remediation activities.
- Program Execution and Continuous Improvement Participates in initiatives that improve vulnerability coverage, asset visibility, remediation effectiveness, exposure management processes, and automation capabilities.
- Stakeholder Engagement Collaborates with technical and business stakeholders to communicate findings, remediation requirements, and security recommendations.
- Cloud Posture Management Analyzes cloud posture findings, validates remediation actions, and assists in improving risk-based remediation processes.
Qualifications
- Bachelor's degree in computer science, Cybersecurity, Information Security, Information Systems, or a related technical field, or equivalent practical experience.
- 7+ years of cybersecurity experience, including 5+ years focused on Enterprise vulnerability management, attack surface management, exposure management on both Cloud and OnPrem.
- Desired hands-on experience in Service-Now, Tenable, Wiz, CrowdStrike Falcon.
- Working knowledge of cloud security architecture and cloud-native security controls, including network security, encryption, key management, and data protection.
- Hands-on experience using CSPM, CNAPP, or cloud security platforms such as Wiz, Prisma Cloud, CrowdStrike Falcon, AWS Security Hub, or similar solutions.
- Strong understanding of securing cloud environments in at least one major cloud platform (AWS, Azure, GCP, or OCI) with working knowledge of preferably AWS or Azure
- Experience working with cross-functional teams to coordinate vulnerability remediation, exception management, and risk reduction activities.
- Strong analytical, communication, and problem-solving skills.
Preferred Certifications
- CCSK (Certificate of Cloud Security Knowledge)
- AWS Certified Cloud Practitioner or AWS Security Specialty
- Microsoft Azure Security Engineer Associate (AZ-500)
- Google Professional Cloud Security Engineer
- CompTIA Security+
- Certified Ethical Hacker (CEH)
- CISSP (Preferred but not required)
Skills Required
- Bachelor's degree in computer science, cybersecurity, information security, information systems, or a related technical field, or equivalent practical experience
- 7+ years of cybersecurity experience
- 5+ years focused on enterprise vulnerability management, attack surface management, or exposure management across cloud and on-premises environments
- Working knowledge of cloud security architecture and cloud-native security controls, including network security, encryption, key management, and data protection
- Hands-on experience with CSPM, CNAPP, or comparable cloud security platforms
- Strong understanding of securing at least one major cloud platform: AWS, Azure, GCP, or OCI
- Experience coordinating vulnerability remediation, exception management, and risk reduction with cross-functional teams
- Strong analytical, communication, and problem-solving skills
- Hands-on experience with ServiceNow, Tenable, Wiz, or CrowdStrike Falcon
- CCSK certification
- AWS Certified Cloud Practitioner or AWS Security Specialty certification
- Microsoft Azure Security Engineer Associate AZ-500 certification
- Google Professional Cloud Security Engineer certification
- CompTIA Security+ certification
- Certified Ethical Hacker certification
- CISSP certification
Cargill Compensation & Benefits Highlights
-
Healthcare Strength — Health coverage includes multiple medical plan options alongside dental, vision, wellness programs, and mental-health/EAP resources. Plan breadth and provider access are often highlighted as strong points.
-
Retirement Support — Retirement offerings feature a 401(k) with employer matching and additional programs such as an ESOP and employer-funded retirement contributions. Plan details like matching and vesting are emphasized as meaningful components of total rewards.
-
Leave & Time Off Breadth — Paid time off scales with tenure and is complemented by paid holidays and paid family leave. These provisions are presented as part of a broad, well-rounded package.
Cargill Insights
What We Do
We are a family company providing food, ingredients, agricultural solutions and industrial products to nourish the world in a safe, responsible and sustainable way. We connect farmers with markets so they can prosper. We connect customers with ingredients so they can make meals people love. And we connect families with daily essentials— from eggs to edible oils, salt to skincare, feed to flooring. By providing customers with products that are vital for living, we help businesses grow, communities prosper and consumers live well in their daily lives.
Why Work With Us
The decision to join Cargill can open the door to a world of possibility. As part of our Digital, Technology & Data team, you’ll get to be part of a large and diverse group full of unique perspectives united by a common, higher purpose while building a rewarding career full of opportunity, growth and the satisfaction of knowing your work matters.
Gallery
Cargill Teams
Cargill Offices
Hybrid Workspace
Employees engage in a combination of remote and on-site work.



.jpg)












.jpg)











