Source Job

$104,000–$166,000/yr
US

  • Lead vulnerability management across enterprise infrastructure, applications, and cloud environments.
  • Manage POA&Ms and support Authorization to Operate (ATO) processes.
  • Develop dashboards, metrics, and reports for senior leadership.

Vulnerability Management Security Compliance Risk Assessment

20 jobs similar to Vulnerability Management Lead

Jobs ranked by similarity.

Canada

  • Administer and tune the enterprise vulnerability management platform for complete asset coverage.
  • Translate threat intelligence into risk-based priorities and coordinate remediation across teams.
  • Produce quarterly vulnerability reports and support continuous improvement of security processes.

Kinaxis is a global leader in modern supply chain orchestration, powering complex global supply chains with an AI-infused platform. We are a global organization with over 2000 employees and 6 offices, known for our strong culture and Top Employer awards.

Latin America

  • Drive risk-based vulnerability and exposure management across infrastructure, applications, cloud services, endpoints, and dependencies.
  • Correlate threat intelligence, asset inventory, and environmental context to assess exploitability and reachability.
  • Automate vulnerability ingestion, analysis, prioritization, and remediation tracking with AI-assisted workflows.

Backblaze is the object storage leader in the open cloud movement, providing purpose-built cloud storage to help customers break free from legacy solutions. Founded in 2007, the company went public in 2021, generates over $136M ARR, manages over three billion gigabytes for 500K+ customers, and fosters a culture of diversity, equity, and inclusion.

EMEA

  • Own the end-to-end vulnerability and detection lifecycle, from discovery and triage to remediation and reporting.
  • Lead the VIPR/VMDR function, integrating threat intel, exploit data, and asset context to drive data-backed decisions.
  • Automate vulnerability scoring and reporting pipelines using Python, PowerShell, REST APIs, and tools like Tenable, Qualys, Rapid7, and Wiz.

ServiceNow is the AI control tower for business reinvention, bringing together AI, data, and workflows to help organizations work smarter. The company's platform serves 85% of the Fortune 500, and it fosters an AI-native culture where technology and talent are unstoppable together.

US

  • Lead vulnerability and exposure management, defining priorities and driving continuous improvement.
  • Manage and mentor security teams, fostering technical excellence and ownership.
  • Establish Continuous Threat Exposure Management and strengthen Attack Surface Management.

The company delivers cybersecurity services, specializing in vulnerability management and continuous threat exposure management. It promotes a collaborative, remote-first culture with autonomy, leadership development, and flexible working arrangements.

US

  • Manage internal and external vulnerability scanning, validate findings, and drive remediation across IT systems.
  • Assess and prioritize vulnerabilities based on severity, exploitability, asset exposure, and business impact.
  • Own endpoint and server patching, third-party application patch management, and continuous improvement of the vulnerability management lifecycle.

Mom's Meals is a home-delivered meal service providing fully prepared, refrigerated meal solutions directly to homes nationwide. We are a family-operated business with a compassionate culture focused on the well-being of seniors and patients.

$129,280–$161,600/yr
US

  • Lead, coach, and develop a team of Security Consultants through regular feedback and performance management.
  • Drive operational excellence by measuring team performance, identifying automation opportunities, and implementing process improvements.
  • Act as a subject matter expert in web, network, cloud, or mobile security and handle complex escalations and appeals.

Bugcrowd is a preemptive security platform that unifies exposure discovery, offensive testing, and AI-driven intelligence to help organizations identify and validate real-world risk. Based in San Francisco and New Hampshire and supported by top venture capital firms, the company fosters a diverse, family-like culture with a broad range of backgrounds including musicians, adventurers, and parents.

North America Unlimited PTO

  • Manage OKR and epic portfolio across vulnerability, configuration, and attack surface programs.
  • Track dependencies, risks, and blockers across teams and drive resolution or escalate early.
  • Produce executive-ready status reporting and build repeatable planning standards.

ServiceNow is an AI platform that automates workflows and helps 85% of the Fortune 500 work smarter. The company fosters an AI-native culture where technology and talent are unstoppable together.

US 3w PTO

  • Lead as the SME for security tools including CASB, vulnerability scanning suite, and EPP, improving tool functionality.
  • Lead the vulnerability management program, working with the patching team to minimize the attack surface.
  • Provide security engineering expertise on projects, implement standards, and research advanced security technologies.

First Quality is a family-owned group of companies that produces high-quality personal care and household products for large retailers and healthcare organizations. It employs over 5,000 team members across 8 manufacturing campuses in the U.S. and Canada, maintaining a collaborative culture rooted in humility, unity, and integrity.

US

  • Lead Portfolio Architects and own service design, Education strategy, and curriculum across ODT/ILT.
  • Drive portfolio maintenance, capacity allocation, and roadmap alignment with product teams.
  • Manage team development, budget, and cross-functional leadership to ensure operational excellence.

Tenable is the Exposure Management company, helping over 40,000 organizations understand and reduce cyber risk. With employees supporting 65% of the Fortune 500 and a culture of belonging, respect, and excellence, Tenable is a great place to work.

US

  • Conduct comprehensive assessments of security controls and enhancements to ensure they meet NIST and federal requirements.
  • Develop and execute Security Controls Test (SCT) plans, including vulnerability scans and penetration testing aligned with DHS RVA standards.
  • Prepare security assessment reports, POA&M inputs, and risk ratings to support authorization decisions.

SkyePoint Decisions is a cybersecurity architecture, engineering, and IT services provider supporting federal government clients. The company is an ISO-certified, CMMI Level 3 small business that fosters a collaborative culture built on individual performance and accountability.

$64,970–$108,040/yr
Canada

  • Identify vulnerabilities, monitor threats, and strengthen security controls across cloud, identity, and infrastructure platforms.
  • Support compliance audits, client assessments, and penetration testing aligned with ISO 27001, SOC 2, and NIST CSF.
  • Manage security tools including Tenable, SIEM, EDR, and Microsoft 365/Azure/AWS to reduce organizational risk.

Alimentiv is a global CRO focused on advancing therapies for gastrointestinal diseases, with over 30 years of scientific and operational expertise. With approximately 700 employees across multiple countries, it operates as a private, profit-with-purpose company reinvesting in research and its people.

India

  • Monitor vulnerability scans and investigate scanning issues across assigned networks.
  • Validate remediation activities and maintain accurate documentation in ticketing systems.
  • Collaborate with asset owners to support advisories, exceptions, and attack surface management.

The hiring company is an enterprise organization focused on strengthening its security posture through robust vulnerability management operations. It fosters a collaborative, flexible remote culture with opportunities for professional growth and technical skill development.

US

  • Analyze authorization workflows and identify automation opportunities for ATO processes.
  • Develop automated evidence collection, validation, and reporting using customer-approved technologies.
  • Integrate with security scanning, SBOM/SCA, vulnerability, workflow, and system-of-record tools.

SkyePoint Decisions is a cybersecurity and IT services provider headquartered in Dulles, Virginia, serving federal government clients. It is an ISO-certified small business appraised at CMMI Level 3 that fosters a collaborative team culture.

Global 5w PTO

  • Own the end-to-end vulnerability response pipeline, from intake and triage to AI-assisted rule generation and public disclosure.
  • Expand automated WAF protection to ModSecurity and Coraza, validating rules to minimize false positives.
  • Lead and mentor a small team of security analysts while measuring time-to-protection and coverage metrics.

CloudLinux develops security products, including Imunify360, to protect websites against critical threats. The company operates with a remote-first culture, emphasizing ownership, professional growth, and effective collaboration across distributed teams.

Europe

  • Own the full security program, from application and infrastructure security to vulnerability management and incident response.
  • Maintain SOC 2 and drive future certifications like ISO 27001, managing evidence collection, auditors, and control assessments.
  • Oversee corporate IT, identity management, data privacy, and vendor security to build customer trust and support enterprise sales.

FullEnrich provides B2B data enrichment by orchestrating 20+ premium data providers to deliver complete contact information for sales and go-to-market teams. Founded in Paris and now headquartered in San Francisco, the company serves 6,000+ customers and is a team of 50+ across the US, Europe, LATAM, and Israel, with a fast-paced, ownership-driven culture.

$104,000–$166,000/yr
US

  • Lead and execute comprehensive penetration testing and red team exercises across networks, applications, APIs, and AWS cloud environments.
  • Apply NIST SP 800-115, MITRE ATT&CK, and DHS RVA standards to deliver high-quality, risk-based security assessments.
  • Mentor junior penetration testers and collaborate with security and infrastructure teams to remediate vulnerabilities and strengthen security posture.

Peraton is a next-generation national security company that delivers trusted mission-critical solutions to protect the nation and allies. The company supports essential government agencies and every branch of the U.S. armed forces, with employees solving the most daunting challenges facing customers.

US

  • Support compliance and risk assessments for cloud-based and classified information systems in line with federal standards.
  • Prepare and maintain RMF documentation, including SSPs, POA&Ms, and continuous monitoring reports.
  • Collaborate with engineering teams and external assessors to achieve and maintain system authorizations.

This is for a partner company that protects cloud-based and classified information systems for federal agencies. It maintains a collaborative, security-focused culture with experienced professionals and government stakeholders.

$108,735–$127,923/yr
US

  • Independently monitor and analyze security events across networks, systems, cloud platforms, and SaaS applications.
  • Manage vulnerability scanning, incident response, and remediation tracking through closure.
  • Administer security controls and support compliance audits under frameworks like NIST 800-171 and CMMC.

Kairos Power is a new nuclear energy technology and engineering company commercializing fluoride-salt-cooled, high-temperature reactors for clean energy. They are an equal opportunity employer building a diverse workforce and rewarding employees with competitive compensation and benefits.

$133,109–$239,596/yr
US 4w PTO

  • Partner with business leaders to translate priorities into practical security and risk decisions.
  • Lead project security assessments, rapid risk reviews, and remediation planning for new products and enterprise changes.
  • Communicate threats, incidents, and policy changes to leadership using a threat-informed, business-aligned approach.

Experian is a global data and technology company, powering opportunities for people and businesses around the world. We have an amazing team of 25,200 people in 32 countries and invest in new advanced technologies to unlock the power of data.

$200,000–$260,000/yr
US Unlimited PTO

  • Lead and develop the security governance, risk, and compliance organization, including FedRAMP, SOC 2, and PCI DSS programs.
  • Own security risk management, third-party risk, and customer assurance, evaluating technical and contractual security requirements.
  • Drive program maturity and scalability, identifying emerging risks and translating them into actionable organizational plans.

SentiLink helps institutions and protects customers by accurately resolving identities and flagging fraud risk. The company is well capitalized, growing quickly, and serves 13 of the top 15 U.S. banks.