Archived listing. The details below describe a past opening.
Required Skills & Experience
- 7+ years in cybersecurity with experience in vulnerability management or exposure management.
- Experience leading teams or cross-functional initiatives.
- Strong understanding of the vulnerability lifecycle and risk-based prioritization.
- Strong reporting and analytics skills.
Nice to Have Skills & Experience
- Experience with ASM/CAASM, SOAR, and Exposure Management platforms as well as Enterprise Vulnerability Management tools (e.g., Qualys, Wiz, Defender, Armis, Swimlane VRM, Elastic). [SJ5.1]
- Familiarity with NIST, CIS frameworks, and regulatory requirements.
- Experience maturing or building vulnerability management programs.
Job Description
Vulnerability Prioritization & Risk Management
- Lead enterprise vulnerability prioritization by leveraging vulnerability intelligence (VM, ASM, CTEM) into risk-prioritized, actionable work
- Establish and enforce vulnerability SLAs aligned to risk tiers.
- Drive risk-based decision-making, including mitigation, remediation, or formal risk acceptance.
- Continuously improve prioritization models leveraging exposure management data and business context.
- Validate data quality and eliminate false positives.[SJ1.1] ________________________________________ Remediation Execution & Coordination
- Lead cross-functional remediation efforts across infrastructure, application, and business teams.
- Ensure clear ownership and accountability for all vulnerabilities.
- Drive remediation through structured workflows and automation platforms. [SJ2.1]
- Escalate risks when remediation timelines are not met. ________________________________________ Program Operations & Governance
- Own daily vulnerability management operations, including scanning, triage, ticketing, and validation.
- Develop and maintain policies, standards, and procedures for vulnerability lifecycle management.
- Ensure alignment with regulatory and audit requirements.
- Maintain risk register entries for accepted risks and exceptions. ________________________________________ Reporting & Metrics
- Deliver executive level reporting on vulnerability posture and trends.
- Define and track KPIs such as SLA adherence and mean time to remediate.
- Provide actionable insights to leadership for risk-based decision-making. ________________________________________ Automation & Tooling
- Contribute to optimization of vulnerability management platforms. [SJ3.1]
- Drive automation for vulnerability ingestion, prioritization, and remediation workflows.
- Improve integration and data accuracy within CMDB and exposure management systems. ________________________________________ Leadership & Stakeholder Engagement
- Lead and mentor a team of vulnerability analysts and engineers.
- Serve as SME escalation point for complex vulnerability scenarios.
- Collaborate with security architecture, engineering, and GRC teams. [SJ4.1]
- Communicate effectively with technical teams and executive leadership.
- Collaboration with key stakeholders in Infrastructure/Platform, Application, Data and Device teams.