Manager, Vulnerability Management

Role overview

Lead and mature a product vulnerability management program covering a broad portfolio of software and services. The role combines security strategy, technical program ownership, and team leadership, with a focus on making security practices effective while enabling development teams to address risk with minimal friction. It reports to the CISO and is fully remote within the United States.

Responsibilities - Build and run an operating model for vulnerability management, including team structure, processes, tools, and agile practices. - Partner with product security and development teams to integrate security into delivery workflows and support developer enablement. - Manage product security scanning capabilities, vulnerability disclosure, and responses to customer and researcher inquiries. - Establish remediation processes and service-level expectations; track program performance through meaningful metrics. - Prioritize initiatives, allocate resources, and coordinate work across cybersecurity, IT, product, and operations teams. - Serve as a contact for external product security questions, support customer discussions and contract reviews, and report program status to executives and auditors.

Requirements - At least eight years of relevant experience in product security, application security, or vulnerability management; leadership experience in product security or vulnerability management is preferred. - Demonstrated experience establishing and leading a vulnerability management program. - Current knowledge of product security threats and vulnerability management practices. - Experience supporting hiring, technical screening, and team development. - Strong analytical, communication, presentation, and stakeholder-influencing skills, including the ability to explain security measures to varied audiences. - Bachelor’s degree in computer science, information security, business, or a related field, or equivalent background; a master’s degree is preferred.

Nice to have

Familiarity with security and risk frameworks such as NIST, ISO 27001, CIS, GDPR, FedRAMP, or Common Criteria; certifications such as CISSP, CISM, CSSLP, or CCSP; Jira or Confluence experience; and a software development background.

Benefits and work setup

US-based, fully remote role with limited travel. Benefits include health coverage, retirement matching, life insurance, an employee assistance program, paid time off, and company holidays.