DescriptionJob SummaryAs the Manager, Information Security (Threat & Vulnerability Management), you will serve in a highly technical "player-coach" leadership role, requiring a blend of hands-on engineering and project/people management. Reporting directly to the Director of Cyber & Information Security, you will lead the specialized Threat & Vulnerability Management functional pillar within the department. While managing and mentoring a team of cross-trained Cybersecurity Engineers and overseeing domain-specific projects, you act as the ultimate technical escalation point for your domain. The ideal candidate actively implements technologies, drives complex incident response, oversees vulnerability mitigation, and translates high-level business risk into day-to-day technical operations.
Key Responsibilities- Threat Management:
- Provides operational oversight of all Threat and Vulnerability Management systems, technologies, processes, and reporting.
- Actively manages and tunes Security Information and Event Management (SIEM) and Endpoint Detection and Response (EDR) platforms.
- Leads the coordination of technical data and evidence collection during moderate-to-severe security incidents, supporting the Director who serves as the overarching Incident Commander.
- Integrates global threat intelligence feeds and analyzes Indicators of Compromise (IoCs) to proactively fortify network and endpoint defenses.
- Develops, maintains, and automates technical Incident Response playbooks utilizing Security Orchestration, Automation, and Response (SOAR) concepts to accelerate threat containment.
- Leads the threat modeling and security posture management of enterprise Artificial Intelligence (AI) and Machine Learning (ML) systems, defending against adversarial threats (e.g., prompt injection, model poisoning), while leveraging AI-driven analytics to accelerate threat detection and streamline vulnerability prioritization.
- Vulnerability Management:
- Drives enterprise vulnerability scanning and coordinates internal or external penetration testing exercises, prioritizing risks and leading cross-functional remediation efforts.
- Collaborates with system owners to evaluate the technical risk of identified vulnerabilities and architects compensating controls when immediate patching is not possible.
- Documentation & Stakeholder Communication:
- Leads efforts to create, document, and continuously maintain Standard Operating Procedures (SOPs) for technical TVM workflows and departmental processes.
- Translates complex technical security risks into clear operational impacts for peer IT leaders.
- Customer & Project Support:
- Partners closely with other IT departments (Infrastructure, Networking, Software Development) to integrate security controls into their respective business projects without disrupting velocity.
- Executes the technical rollout of new threat and vulnerability vendor products from proof-of-concept to full enterprise deployment.
- Leads, tracks, and executes security-focused projects from inception to completion, ensuring milestones, Service Level Agreements (SLAs), and Mean Time to Resolve (MTTR) metrics are met for the TVM pillar.
- Manages relationships with critical security vendors, ensuring platforms are properly deployed, maintained, and delivering maximum ROI.
- Continuous Improvement & Operations:
- Manages, mentors, and develops a high-performing team of technical Cybersecurity Engineers.
- Handles all core HR responsibilities, including performance evaluations, hiring, goal setting, and guiding career ladder progression.
- Researches new security processes and emerging TVM technologies, evaluating their efficacy and presenting formal recommendations for changes to department leadership.
- Drives the department's cross-domain training goals, ensuring team members build proficiency outside their primary operational focus to maintain a well-rounded, agile workforce.
- Identity & Access Management (IAM):
- Partners closely with the IAM pillar to correlate identity-based threats, investigate authentication anomalies, and enforce automated access revocations during active security incidents.
Travel Information- Occasional Domestic Occasional travel may be required to attend industry conferences, participate in professional training, or support operations at remote office locations.
QualificationsEducation- Bachelor's degree or equivalent experience Bachelor's degree or equivalent experience in a computer-related field such as Computer Science, Mathematics, or Engineering. Master's or other advanced degree is preferred. Req
Work Experience- 10-15 years 10 - 15+ years of progressive, hands-on experience within the Information Security or Cybersecurity field. Req
- 2-4 years Readiness for first-tier management of direct people and project management experience. Req
Licenses and Certifications - Relevant professional management and engineering certifications such as ISACA CISM, (ISC) CISSP, or equivalent senior-level architecture certifications are highly preferred. Upon Hire Pref
Skills and Requirements - Technical Skills & Concepts:
- Deep, proven engineering experience operating at a Senior or Lead level strictly within Threat Management and Vulnerability Management.
- Strong willingness and ability to remain hands-on-keyboard (60% allocation), executing complex technical tasks alongside the engineering team.
- Advanced expertise in modern threat detection/response toolsets, network security, and enterprise vulnerability lifecycles.
- Expert knowledge of security technologies including advanced encryption algorithms, enterprise network security, complex firewall architecture, PKI, and cloud-native security paradigms.
- Mastery of Artificial Intelligence (AI) tools to automate and assist with complex cybersecurity tasks, threat hunting, and operational workflows.
- Advanced understanding of application development life cycle (SDLC) models and modern DevSecOps testing tools.
- Intimate knowledge of highly complex operating system environments, hybrid cloud directory synchronization, and advanced networking protocols.
- Soft Skills:
- Demonstrated ability to manage TVM operations and pivot seamlessly between deep technical troubleshooting, project tracking, and high-level team management.
- Exceptional communication and presentation skills, with the ability to clearly articulate complex risks to senior executives and technical staff. Strong technical leadership, mentorship, and work direction skills with a proven ability to elevate the capabilities of the engineering team. Strong decision-making capabilities, able to operate authoritatively in high-stress, real-time crisis scenarios. Ability to effectively prioritize competing projects and operational incidents in a fast-paced environment.
Other Requirements:As defined in IEEE Policies, individuals currently serving on an IEEE board or committee are not eligible to apply.
PLEASE NOTE: This position is not budgeted for employer-sponsored immigration support, this includes all persons in F (both CPT and OPT), J, H, L, or O status.
For information on work demands and conditions required for this position, please consult the reference document, ADA Requirements. This position is classified under Category I - Office Positions.
All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.
Disclaimer: This job description is proprietary to IEEE. It outlines the general nature and key features performed by various positions that share the same job classification. It is not designed to contain or be interpreted as a comprehensive inventory of all duties and qualifications required of all employees assigned to the job. Nothing in this job description restricts management's right to assign or re-assign duties to this job at any time due to reasonable accommodations or other business reasons.
