Skip to main content
CareerApp
CNA Financial

AI Attack Surface and Threat Exposure Management Consulting Director

CNA Financial

Director

$97,000 – $189,000

Listed on CNA Financial’s own careers site. You apply with them directly — we never stand between you and the employer.

What this role is

This director-level role leads the strategy and deployment of AI and automation across application security, vulnerability management, and attack surface discovery programs. It suits senior security professionals with deep expertise in these domains who are ready to shape how AI transforms enterprise security operations.

Our summary, not CNA Financial’s wording. The full posting is on their site.

What they ask for

Required

  • 10+ years in information security, application security, vulnerability management, ethical hacking, penetration testing, attack surface management, security engineering, or security architecture
  • Deep understanding of vulnerability management, application security, cloud security, ethical hacking, threat management, and security remediation
  • Strong working knowledge of AI/ML, GenAI, LLM, and agentic AI security concepts
  • Experience developing and maturing service, tooling, and process automation
  • Software development and/or scripting experience
  • Understanding of security vulnerabilities, threats, and industry standard risk management methodologies
  • Ability to communicate technical information to all audiences
  • Ability to influence change and drive adoption of automation and AI
  • Experience interacting with senior business leadership on security priorities
  • Working knowledge of regulations (SOX, privacy) and internal controls as applied to IT

Nice to have

  • Master's degree in Computer Science or technical field
  • Relevant security certifications
  • Up-to-date knowledge of current best practices and trends in security

Turn on analytics and we load Google Analytics: Google gets the pages you open and what you do here — searches, jobs you view, jobs you apply to — and sets its own cookies. Leave it off and the only cookies we set are your login, your theme, and this answer. Accept All also records a yes to advertising, which nothing uses yet. Privacy Policy.