Sr. Consultant, Surface Area Management

Job description

Cargill is committed to providing food and agricultural solutions to nourish the world in a safe, responsible, and sustainable way. Sitting at the heart of the supply chain, we partner with farmers and customers to source, make and deliver products that are vital for living. Our 155,000 team members innovate with purpose, providing customers with life’s essentials so businesses can grow, communities prosper, and consumers live well. With over 160 years of experience as a family company, we look ahead while remaining true to our values. We put people first. We reach higher. We do the right thing—today and for generations to come. Job Purpose and Impact The Senior Vulnerability Management Analyst safeguards the organization's digital assets by leading the identification, assessment, prioritization, and remediation of cybersecurity vulnerabilities across the global enterprise. This role serves as a trusted advisor and technical leader, driving enterprise vulnerability management strategy, governance, and continuous improvement initiatives. With minimal supervision, the Senior Analyst partners with cybersecurity, infrastructure, cloud, engineering, risk, and business leaders to reduce organizational exposure and improve cyber resilience. Key Accountabilities Leading enterprise-wide vulnerability management and exposure reduction programs. Performing advanced analysis of vulnerability data from tools such as Tenable, Qualys, Rapid7, Wiz, and cloud-native security platforms. Establishing risk-based prioritization methodologies that incorporate threat intelligence, exploit activity, business criticality, and compensating controls. Driving remediation accountability and governance across technology and business stakeholders. Developing executive-level reporting, metrics, and risk insights for leadership and governance forums. Leading major vulnerability response efforts related to zero-day threats, actively exploited vulnerabilities, and high-profile CVEs. Identifying systemic vulnerability trends and recommending strategic improvements to reduce recurring risk. Partnering with Threat Intelligence, Threat Hunting, Red Team, Incident Response, and Security Architecture teams to validate and enrich findings. Leading continuous improvement efforts related to scanning coverage, asset visibility, attack surface management, and remediation effectiveness. Designing and implementing dashboards, automation, and integrations to improve program efficiency and reporting. Consulting on security architecture, cloud adoption, and remediation strategies across on-premises and cloud environments. Mentoring junior analysts and providing technical leadership during complex investigations and remediation efforts. Demonstrating deep expertise in CVSS, EPSS, MITRE ATT&CK, threat modeling, and cyber risk management frameworks. Providing strategic guidance for remediation across Windows, Linux, networking, cloud platforms (AWS, Azure, GCP, OCI), containers, and modern enterprise technologies. Qualifications Minimum requirement of 5 years of relevant work experience with relevant cybersecurity, vulnerability management, attack surface management, or exposure management experience. Typically reflects 7+ years of relevant experience. Experience leading enterprise-scale vulnerability management, exposure management, or cyber risk reduction initiatives preferred. Demonstrated experience influencing senior leaders and driving cross-functional remediation efforts. Relevant industry certifications such as CISSP, GSEC, GIAC, Security+, CySA+, AWS Security, Azure Security Engineer, or equivalent are preferred Equal Opportunity Employer, including Disability/Vet.