Senior Vulnerability Manager
Core
Own the enterprise vulnerability management program across cloud, endpoint, and application surfaces, driving risk-based identification, prioritization, automated remediation, and verified closure.
Role type
Senior IC Vulnerability Management Engineer
Builds
Enterprise scanning architectures, automated patching workflows, data pipelines, and risk governance frameworks
Domain
Cybersecurity / Application Security / DevSecOps
Required skills
Vulnerability management lifecycle governance, risk-based prioritization (CVSS/EPSS/CISA KEV), automated remediation orchestration, asset inventory management, enterprise scanning design, patch management, CI/CD integration, risk modeling, technical mentorship
Preferred skills
None stated
Technologies
SAST, SCA, DAST, ITSM, CMDB, CI/CD pipelines, Infrastructure-as-code
Responsibilities
Govern end-to-end vulnerability lifecycle (intake, scanning, triage, remediation, verification, reporting); Enforce remediation SLAs and manage risk acceptances; Drive complete asset coverage across servers, endpoints, containers, and cloud; Design and optimize enterprise vulnerability scanners; Implement automated patching capabilities; Collaborate with Threat Intelligence to adjust priority queues; Partner with IT/Cloud Ops to integrate patching into CI/CD; Maintain executive-ready metrics on exposure and SLA adherence; Tune risk models and scanning frequencies; Mentor team members; Maintain audit-ready program evidence
Seniority
Senior, hands-on IC with leadership responsibilities
