Vulnerability Manager

📋 Description

• Design and operate the product vulnerability management process end to end: intake, triage, risk
• Own vulnerability management for FedRAMP 20x, including continuous monitoring cadence
• Stand up vulnerability management for new products and services as they ship: define scan coverage
• Assess and rank vulnerability risk using exploitability, exposure, asset criticality, and
• Drive remediation with product engineering teams: assign ownership, agree timelines, lead rapid
• Automate the process wherever manual effort scales with finding volume, using scripting, workflow

🎯 Requirements

• 5+ years in vulnerability management, product security, or security operations, with direct
• Demonstrated experience designing and operating vulnerability management in a regulated or audited
• Working knowledge of FedRAMP and NIST SP 800-53: vulnerability scanning, flaw remediation
• Hands-on operation of enterprise vulnerability and exposure management platforms, cloud security
• Practical automation skill: Python scripting or equivalent, workflow and reporting tooling, and use
• Ability to write clear technical requirements and partner with security engineering through design