Vulnerability Management Manager

Avaya

. Lead a team of vulnerability management engineers .

Posted 10/16/2026full-timeRemote • United StatesMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in vulnerability management, including the identification, prioritization, and remediation of infrastructure and application vulnerabilities. Proficient in utilizing vulnerability assessment tools and frameworks such as MITRE ATT&CK, while effectively communicating risk metrics and coordinating cross-functional teams.

Highest-signal resume keywords

Vulnerability Management LeadershipMITRE ATT&CK Framework ExperienceSIEM Platform ProficiencyCybersecurity CertificationsRisk Management Knowledge

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Vulnerability AssessmentIncident ResponseThreat Intelligence AnalysisNetwork Traffic AnalysisRisk Metrics DevelopmentProcess ImprovementApplication Vulnerability RemediationIntrusion Techniques ApplicationSecurity Policy AlignmentTechnical Guidance

Soft Skills

Strong Communication SkillsOrganizational SkillsAnalytical SkillsProblem-Solving SkillsTeam Coordination

Tools & Technologies

QualysSymantecNessusSIEM PlatformsURL Filtering TechnologiesWeb Proxy Technologies

Certifications & Qualifications

CompTIA Security+CISSPGIACGCIH

Industry Keywords

ISO 27001NIST CSFNIST SP 800-53PCI DSS ASVBOD 26-04

Tech Stack

Tools & technologies

Cyber Security

About the role

Key responsibilities & impact

Lead a team of vulnerability management engineers
Identify, track, prioritize, and drive infrastructure and application vulnerabilities through remediation to resolution
Establish priorities, balance workloads, coordinate assignments, and provide technical guidance
Align remediation with enterprise risk requirements, security policies, and BOD 26-04 obligations
Represent infrastructure vulnerability management during incident calls involving application vulnerabilities
Coordinate escalations and communicate remediation status
Monitor emerging vulnerabilities, threat intelligence, adversary techniques, and industry trends
Apply common attack vectors, intrusion techniques, and MITRE ATT&CK to vulnerability prioritization
Use vulnerability assessment tools, SIEM platforms, network traffic analysis, and security event correlation to investigate findings and validate remediation
Develop and quality-assure monthly vulnerability and risk metrics for management and executives
Identify process and control gaps and implement continuous improvements
Create and maintain processes, procedures, operational standards, and training documentation
Support onboarding and development of vulnerability management engineers
Collaborate with application engineering, infrastructure operations, security operations, vendor management, and risk teams
Evaluate emerging security tools and assessment methodologies

Requirements

What you’ll need

Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field, or an equivalent combination of education and relevant experience
6+ years of relevant IT or cybersecurity experience
5+ years of security experience with hands-on exposure to Qualys, Symantec, or Nessus
3+ years of experience with SIEM platforms
3+ years of experience supporting or analyzing adversary tactics and techniques using the MITRE ATT&CK framework
Knowledge of ISO 27001, NIST CSF, NIST SP 800-53, PCI DSS ASV, and BOD 26-04
Strong written and verbal communication, organizational, analytical, and problem-solving skills
Ability to coordinate multiple initiatives, manage competing priorities, and drive remediation across cross-functional teams
Ability to support after-hours and weekend on-call rotations as required
Industry-recognized cybersecurity certification such as CompTIA Security+, CISSP, GIAC, or GCIH is preferred
Experience with URL filtering, web proxy technologies, and troubleshooting is preferred
Experience creating executive presentations, developing risk metrics, and supporting management reporting is preferred
Applicants must be currently authorized to work in the United States without visa sponsorship now or in the future

Benefits

Comp & perks

Equal Opportunity employer
U.S. Federal Contractor
Support for employee growth and development
Participation in after-hours and weekend on-call rotations as required (job obligation, not a benefit)