Manager, Vulnerability Management

Salary: Open + Bonus

Location: Remote

*We are unable to provide sponsorship for this role*

Qualifications

• Bachelor's degree
• 8+ years of related experience
• At least 1 year of management experience
• Proven experience managing enterprise-scale vulnerability management programs and tools
• Deep understanding of risk-based vulnerability management.
• Knowledge of vulnerability scoring systems (CVSS), security benchmarks (CIS, NIST), and risk quantification techniques
• Proficiency in selecting, implementing, and managing vulnerability scanning tools (eg, SAST, SCA, IAST, DAST, Network/Infrastructure, Cloud, etc.) across the technology stack
• Experience designing and implementing automation for vulnerability management processes using generative AI, agent-based systems, large language models (LLMs), or machine learning to improve efficiency, effectiveness, and scalability

Responsibilities

• Leads, coaches, and develops a team of engineers responsible for vulnerability discovery, assessment, risk-based prioritization, and remediation tracking across cloud, on-premises, and hybrid environments
• Envisions, defines, designs, builds, staffs, and delivers vulnerability management processes and capabilities
• Leads and supports the planning and execution of team goals and projects, including setting long-term strategy and making decisions about tools, technology, and staffing needs
• Partners closely with stakeholders across technology, including architecture, engineering, infrastructure, application development, and cyber risk management teams to facilitate vulnerability communications, support remediation activities, and provide continuous reporting.
• Collaborates with enterprise risk, compliance, and threat intelligence teams to ensure vulnerability management aligns with the organization's overall risk management strategy.
• Ensures all project deliverables meet high standards for accuracy, completeness, and impact, and are delivered on time to support team and organizational objectives
• Represents the vulnerability management program to senior leadership, delivering concise, risk-informed insights and recommendations