Vulnerability Manager
Core
Design and operate end-to-end product vulnerability management processes, focusing on FedRAMP 20x compliance and new product onboarding.
Role type
Senior IC vulnerability manager (security operations)
Builds
Automated vulnerability management workflows, risk assessment frameworks, and compliance reporting for regulated environments.
Domain
Cybersecurity, Identity Security, FedRAMP compliance
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Vulnerability management process design, automation scripting (Python), risk-based prioritization (CVSS, EPSS, KEV), regulated environment operations, stakeholder remediation driving, metrics ownership, cloud security assessment
Preferred skills
FedRAMP Moderate/High authorization experience, SaaS/identity security product knowledge, AI-assisted security workflows, executive reporting
Technologies
Python, container scanning, software composition analysis, CI/CD, AWS, Kubernetes, vulnerability management platforms
Responsibilities
Design and operate end-to-end vulnerability management processes; own FedRAMP 20x compliance and continuous monitoring; stand up vulnerability management for new products; assess and rank vulnerability risk; drive remediation with engineering teams; automate manual processes; own program metrics; lead rapid response for zero-day vulnerabilities
Seniority
Senior, hands-on IC