Vulnerability Manager

Job not on LinkedIn

🔥 4 minutes ago

🌐 Canada, United States – Remote

🇨🇦 Canada – Remote 🇺🇸 United States – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

👔 Manager

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

BeyondTrust

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 1985

🔒 Cybersecurity

💰 Private Equity Round on 2021-05

Cybersecurity

BeyondTrust is a company that specializes in providing cybersecurity solutions. They focus on offering products and services that protect organizations from internal and external threats, and their solutions often involve privileged access management to secure and manage the identities and credentials of users accessing critical systems and data.

📋 Description

• Design and operate the product vulnerability management process end to end, including intake, triage, risk assessment, assignment, SLA tracking, exception handling, and closure verification • Own vulnerability management for FedRAMP 20x, including continuous monitoring, machine-readable evidence, Key Security Indicator reporting, and POA&M lifecycle management • Establish vulnerability management for new products and services, including scan coverage, onboarding, SLAs, and reporting • Assess and rank vulnerability risk using exploitability, exposure, asset criticality, and compensating controls • Drive remediation with product engineering teams, escalate overdue Critical and High findings, and record time-bound risk acceptances • Automate triage, deduplication, enrichment, summarization, reporting, workflow, and evidence collection using scripting, workflow tooling, and AI-assisted analysis • Define requirements for integrations involving scanners, ticketing, asset inventory, and dashboards; partner with Security Engineering through delivery and validate outcomes • Own program metrics including SLA attainment, mean time to remediate, vulnerability aging, backlog trend, scan and asset coverage, and exception volume • Report metrics to security and engineering leadership on a fixed cadence • Maintain current visibility into critical product exposure and open vulnerabilities • Lead rapid response for actively exploited and zero-day vulnerabilities, including exposure assessment, mitigation tracking, and stakeholder communication

🎯 Requirements

• 5+ years in vulnerability management, product security, or security operations, with direct ownership of a vulnerability management process • Experience designing and operating vulnerability management processes in a regulated or audited environment and sustaining them through assessment cycles • Working knowledge of FedRAMP and NIST SP 800-53, including vulnerability scanning, flaw remediation, continuous monitoring, configuration management, and POA&M management • Hands-on experience with enterprise vulnerability and exposure management platforms, cloud security posture tooling, container scanning, and software composition analysis • Practical automation skills, including Python or equivalent scripting, workflow and reporting tooling, and AI assistants • Ability to write technical requirements and partner with security engineering through design, delivery, and acceptance • Understanding of CVSS, CISA Known Exploited Vulnerabilities (KEV), EPSS, and risk-based prioritization • Working knowledge of cloud services, AWS preferred, containers, Kubernetes, CI/CD, web applications, and APIs • Ability to drive remediation across engineering teams without direct authority • Clear written and verbal communication with engineers, executives, auditors, and customers • Must be North America based

🏖️ Benefits

• Flexibility, trust, and continual learning culture • Employee care and support • Diversity and inclusion culture