Senior Manager, Cyber Threat Exposure Management

AeroVironment

. Lead, mentor, and develop a team of 2–3 cybersecurity personnel .

Posted 11/2/2026full-timeUnited StatesSenior💰 $128,000 - $217,500 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in vulnerability management, threat exposure management, and team leadership within cybersecurity. Proficient in coordinating remediation efforts, assessing vulnerabilities, and automating security workflows to enhance organizational security posture.

Highest-signal resume keywords

Vulnerability ManagementThreat Exposure ManagementTeam LeadershipSecurity Configuration ToolsCybersecurity Certifications

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Vulnerability AssessmentThreat IntelligenceRisk AssessmentExposure DiscoveryRemediation WorkflowsPenetration TestingSecurity Configuration AssessmentAutomation with PowerShellPython ProgrammingAsset Discovery

Soft Skills

Analytical SkillsDocumentation SkillsOrganizational SkillsPersonnel LeadershipCommunication Skills

Tools & Technologies

Microsoft Defender Vulnerability ManagementTaniumTenableQualysRapid7Microsoft AzureMicrosoft 365Microsoft SentinelEnterprise Ticketing PlatformsCloud Services

Certifications & Qualifications

Relevant Cybersecurity CertificationsSecret Clearance

Industry Keywords

CMMCNIST SP 800-171NIST SP 800-53CIS BenchmarksAerospaceDefenseManufacturingRegulated EnvironmentsITAR/EAR ComplianceCybersecurity

Tech Stack

Tools & technologies

AzureCloudCyber SecurityLinuxPython

About the role

Key responsibilities & impact

Lead, mentor, and develop a team of 2–3 cybersecurity personnel
Manage daily operations, workload assignments, technical development, and quality of deliverables
Develop and maintain the threat exposure management strategy, roadmap, procedures, and operating cadence
Establish processes for exposure discovery, validation, prioritization, remediation tracking, and closure verification
Manage supporting tools and service providers and improve coverage, efficiency, and automation
Oversee vulnerability scanning, asset discovery, external attack surface monitoring, and security configuration assessments
Identify gaps in asset inventory, scanning coverage, security tooling, and ownership
Assess vulnerabilities, misconfigurations, excessive privileges, unsupported technologies, and exposed services
Coordinate authorized security testing and attack path analysis
Incorporate penetration test, security assessment, threat intelligence, and incident findings into the exposure management program
Prioritize exposures based on exploitability, active exploitation, asset criticality, accessibility, business impact, and compensating controls
Translate technical findings into remediation requirements and establish risk-based timelines
Track findings through verified closure and coordinate urgent remediation for actively exploited vulnerabilities
Escalate overdue or high-impact exposures and communicate remediation barriers to cybersecurity leadership
Manage exception documentation and review cycles
Partner with security operations and incident response teams
Work with infrastructure, endpoint, identity, network, cloud, and application teams to address recurring weaknesses
Support governance, risk, and compliance teams with exposure and control-effectiveness evidence
Integrate exposure management requirements into technology onboarding, change management, and system lifecycle processes
Maintain dashboards and leadership reporting on assessment coverage, critical exposures, remediation performance, aging findings, and exceptions
Measure verified risk reduction and recurring exposure trends
Automate scanning workflows, findings enrichment, ticket creation, ownership assignment, and remediation validation
Provide leadership recommendations on remediation priorities, resource constraints, and security posture improvements

Requirements

What you’ll need

Bachelor’s degree in cybersecurity, information technology, computer science, or a related field, or equivalent professional or military experience
Five or more years of cybersecurity experience, including substantial experience in vulnerability management, security engineering, or threat exposure management
Two or more years of team leadership, technical lead, or supervisory experience
Hands-on experience with enterprise vulnerability assessment platforms, security configuration tools, and remediation workflows
Working knowledge of Windows and Linux systems, enterprise networking, cloud services, identity security, and common attack techniques
Ability to assess vulnerabilities using technical severity, exploitability, threat intelligence, and business context
Experience coordinating remediation across multiple technical teams and communicating risk to technical and nontechnical stakeholders
Strong analytical, documentation, organizational, and personnel leadership skills
Secret clearance
Must qualify as a U.S. person under ITAR/EAR, or be eligible for an export license
U.S. Citizenship required
Ability to work in an office environment
Experience with Microsoft Defender Vulnerability Management, Microsoft Defender for Endpoint, Microsoft Sentinel, Tanium, Tenable, Qualys, Rapid7, or comparable platforms
Experience with Microsoft Azure, Microsoft 365, hybrid environments, and GCC High
Familiarity with CMMC, NIST SP 800-171, NIST SP 800-53, and CIS Benchmarks
Experience supporting aerospace, defense, manufacturing, or other regulated environments
Experience with attack surface management, attack path analysis, or security control validation
Experience automating security workflows using PowerShell, Python, APIs, and enterprise ticketing platforms
Relevant cybersecurity certifications demonstrating technical or management proficiency

Benefits

Comp & perks

Medical insurance
Dental insurance
Vision insurance
401K with company matching
9/80 work schedule
Paid holiday shutdown