Manager, Vulnerability Management

Manager, Vulnerability Management

Salary: Open + Bonus

Location: Remote

*We are unable to provide sponsorship for this role*

Qualifications

• Bachelor s degree
• 8+ years of related experience
• At least 1 year of management experience
• Proven experience managing enterprise-scale vulnerability management programs and tools
• Deep understanding of risk-based vulnerability management. Knowledge of vulnerability scoring systems (CVSS), security benchmarks (CIS, NIST), and risk quantification techniques
• Proficiency in selecting, implementing, and managing vulnerability scanning tools (e.g., SAST, SCA, IAST, DAST, Network/Infrastructure, Cloud, etc.) across the technology stack
• Experience designing and implementing automation for vulnerability management processes using generative AI, agent-based systems, large language models (LLMs), or machine learning to improve efficiency, effectiveness, and scalability

Responsibilities

• Leads, coaches, and develops a team of engineers responsible for vulnerability discovery, assessment, risk-based prioritization, and remediation tracking across cloud, on-premises, and hybrid environments
• Envisions, defines, designs, builds, staffs, and delivers vulnerability management processes and capabilities
• Leads and supports the planning and execution of team goals and projects, including setting long-term strategy and making decisions about tools, technology, and staffing needs
• Partners closely with stakeholders across technology, including architecture, engineering, infrastructure, application development, and cyber risk management teams to facilitate vulnerability communications, support remediation activities, and provide continuous reporting. Collaborates with enterprise risk, compliance, and threat intelligence teams to ensure vulnerability management aligns with the organization s overall risk management strategy.
• Ensures all project deliverables meet high standards for accuracy, completeness, and impact, and are delivered on time to support team and organizational objectives
• Represents the vulnerability management program to senior leadership, delivering concise, risk-informed insights and recommendations