Manager, Vulnerability Operations

. Lead the enterprise vulnerability management and continuous threat exposure program .

Posted 9/25/2026full-timeRemote • United StatesMid-LevelSenior💰 $124,000 - $155,000 per yearWebsite

Tools & technologies

AWSAzureCloudCyber SecurityLinuxPython

Key responsibilities & impact

Lead the enterprise vulnerability management and continuous threat exposure program
Oversee discovery, triage, risk prioritization, and remediation tracking of security flaws across multi-cloud, on-premises, and product environments
Own and continuously improve the enterprise vulnerability management lifecycle, strategy, and operating procedures
Oversee routine and credentialed vulnerability scans across infrastructure, AWS/Azure cloud services, endpoints, and applications
Rank vulnerabilities using CVSS, EPSS, CISA Known Exploited Vulnerabilities (KEV), threat intelligence, and asset business criticality
Partner with system, network, and application engineering teams to establish SLAs, track remediation plans, and resolve POA&Ms
Manage enterprise vulnerability platforms such as Tenable, Qualys, Rapid7, and Wiz
Drive operational efficiencies through API-driven automation and Python/PowerShell scripting
Generate executive dashboards, KPIs, and exposure-reduction metrics for leadership and compliance audits
Provide immediate exposure analysis and vulnerability context during active cyber incident investigations
Bridge security engineering and IT operations while collaborating with cross-functional teams to reduce risk exposure and ensure compliance

What you’ll need

5–7+ years of overall experience in cybersecurity or IT operations
3+ years in a senior operational role focused on vulnerability or exposure management
Deep familiarity with vulnerability scanners and exposure management tools, including Tenable, Qualys, Rapid7, and Wiz
Knowledge and practical use of Frontier AI models
Strong grasp of networking protocols, Windows/Linux operating systems, and cloud architecture
Exceptional communication abilities to translate complex technical risk data into executive-level insights
Preferred: CISSP, CISM, GIAC (GPEN, GEVA), or vendor-specific platform certifications
Preferred: Experience working in regulated industries, including Financial Services, Healthcare, or Federal/NIST frameworks

Comp & perks

Medical, dental and vision coverage starting on day one
Basic life, accident, short-term and long-term disability, and business travel accident insurance
Aon Pooled Employer Plan (Aon PEP)
401(k) retirement savings plan
Investment options and financial education
Flexible Spending Accounts
Educational assistance programs
Paid holidays
Paid time off ranging from 20 to 35 days based on length of service
Family and medical leaves of absence
Paid parental leave
Commuting benefits
Employee Discount Program
Employee Assistance Program (EAP)
Childcare benefits
Reasonable accommodations during the application or interview process