Lead InfoSec Engineer, Vulnerability Management
Core
Lead enterprise-wide vulnerability management lifecycle across infrastructure, cloud, and application environments, providing strategic oversight and risk-based prioritization to protect critical business assets.
Role type
Senior IC InfoSec Engineer (Vulnerability Management)
Builds
Enterprise vulnerability management programs, executive reporting dashboards, and governance frameworks
Domain
Enterprise Information Security / Cybersecurity
Deliverable
production ML models | product features | dashboards & analysis | infrastructure
Required skills
Vulnerability management lifecycle expertise, CVE/CVSS/CWE framework knowledge, Qualys/Tanium/Rapid7 platform experience, Application security testing (DAST/SAST), Risk assessment and prioritization, Cross-functional stakeholder alignment, Regulatory compliance and audit support, KPI development and monitoring
Preferred skills
Advanced vulnerability management in on-prem and cloud environments, Power BI/Tableau for security analytics, NIST Cybersecurity Framework/ISO 27001 knowledge, Cloud platform security (AI/ML systems)
Technologies
Qualys, Tanium, Rapid7, Fortify, Checkmarx, Veracode, Power BI, Tableau
Responsibilities
Lead enterprise-wide vulnerability management lifecycle, Drive cross-functional collaboration for timely remediation, Develop comprehensive reporting and metrics programs, Mentor junior security professionals, Support regulatory compliance and audit activities, Establish and monitor KPIs for vulnerability remediation
Seniority
Senior, hands-on IC with leadership influence
