About Gruve
Gruve is an innovative software services startup dedicated to transforming enterprises to AI powerhouses. We specialize in cybersecurity, customer experience, cloud infrastructure, and advanced technologies such as Large Language Models (LLMs). Our mission is to assist our customers in their business strategies utilizing their data to make more intelligent decisions. As a well-funded early-stage startup, Gruve offers a dynamic environment with strong customer and partner networks.
Position summary:
We are looking for an experienced CTEM (Continuous Threat Exposure Management) Expert to lead the design, implementation, and continuous operation of exposure management programs for our clients. This role sits at the intersection of vulnerability management, attack surface management, threat intelligence, and risk-based remediation helping clients move from periodic point-in-time assessments to a continuous, adversary-informed exposure reduction program aligned with 5-stage CTEM framework (Scoping, Discovery, Prioritization, Validation, and Mobilization).
You will work directly with client CISOs, security operations teams, and IT owners to build programs that identify, prioritize, validate, and reduce cyber exposure across on-prem, cloud, and hybrid environments and demonstrate measurable reduction in exploitable risk over time.
Key Roles & Responsibilities:
- Lead end-to-end delivery of CTEM engagements across the five stages: Scoping, Discovery, Prioritization, Validation, and Mobilization
- Design and operationalize continuous exposure management programs tailored to client risk appetite, industry, and regulatory context
- Integrate and correlate data across vulnerability management, attack surface management (ASM), cloud security posture management (CSPM), threat intelligence, and breach & attack simulation (BAS) tools to build a unified exposure view
- Translate technical findings (CVEs, misconfigurations, exposed assets, identity risks) into business-risk-prioritized remediation plans using exploitability, asset criticality, and threat context (e.g., KEV, EPSS, active exploitation campaigns)
- Drive adversarial validation of exposures through coordination with red/purple teams, pentesters, or automated validation platforms to confirm real-world exploitability
- Own exposure reduction metrics and reporting and present progress to client stakeholders and leadership
- Coordinate remediation and patch/mitigation execution with client asset owners, IT, and SOC teams; manage emergency response for zero-days and actively exploited vulnerabilities
- Build and refine CTEM playbooks, runbooks, and governance frameworks; establish exception and risk-acceptance processes
- Support pre-sales activities — scoping calls, proposals, PoCs, and CTEM maturity assessments for prospective clients
- Mentor junior consultants/analysts and contribute to practice capability building, including tool evaluation and methodology development
- Stay current on the threat landscape, emerging attack techniques, and CTEM tooling ecosystem.
Mandatory Qualifications:
- BE/BTech (CS/IT/E&TC) or equivalent.
- 5–10 years of overall cybersecurity experience, with 3+ years in exposure management, vulnerability management, attack surface management, or red team/adversary simulation
- Strong hands-on experience with CTEM/exposure management platforms such as Tenable (Exposure Management/One), Qualys VMDR/ETM, CrowdStrike Falcon Exposure Management, or similar
- Practical experience with attack surface management (ASM) tools and breach & attack simulation (BAS) platforms
- Solid understanding of vulnerability prioritization frameworks: CVSS, EPSS, CISA KEV, exploit maturity,