Vulnerability Manager

📋 Description

• Design and operate the complete product vulnerability management lifecycle, including intake
• Own vulnerability management for FedRAMP 20x, including continuous monitoring, machine-readable
• Establish vulnerability management processes for new products and services by defining scan
• Assess and prioritize vulnerability risk using exploitability, exposure, asset criticality
• Drive remediation across product engineering teams by assigning ownership, agreeing timelines
• Automate repetitive vulnerability management activities using scripting, workflow tooling, and

🎯 Requirements

• 5+ years of experience in vulnerability management, product security, or security operations, with
• Demonstrated experience designing and operating vulnerability management processes within regulated
• Working knowledge of FedRAMP and NIST SP 800-53, particularly vulnerability scanning, flaw
• Hands-on experience with enterprise vulnerability and exposure management platforms, cloud security
• Practical automation skills using Python or an equivalent scripting language, workflow and
• Ability to write clear technical requirements and collaborate effectively with Security Engineering

🎁 Benefits

• Fully remote work for candidates based in North America.
• Competitive compensation and employee benefits.
• Opportunity to own a security program with significant impact across a broad product portfolio.
• Exposure to regulated cybersecurity environments, including FedRAMP 20x and NIST-aligned practices.
• Hands-on work with vulnerability management, cloud security, containers, Kubernetes, automation
• Close collaboration with Security Engineering, product engineering, security leadership, auditors