Source Job

US

  • Lead and mature Delinea's Product Vulnerability Management program, designing and executing a target operating model with agile best practices.
  • Partner with Product Security and Development teams to integrate security while ensuring developer enablement, and manage scanning tools like SAST, SCA, and DAST.
  • Act as primary point of contact for external Product Security inquiries, oversee metrics and SLAs, and report to executives and stakeholders.

Vulnerability Management Product Security Application Security Leadership

18 jobs similar to Manager of Product Vulnerability Management

Jobs ranked by similarity.

Canada

  • Administer and tune the enterprise vulnerability management platform for complete asset coverage.
  • Translate threat intelligence into risk-based priorities and coordinate remediation across teams.
  • Produce quarterly vulnerability reports and support continuous improvement of security processes.

Kinaxis is a global leader in modern supply chain orchestration, powering complex global supply chains with an AI-infused platform. We are a global organization with over 2000 employees and 6 offices, known for our strong culture and Top Employer awards.

$104,000–$166,000/yr
US

  • Lead vulnerability management across enterprise infrastructure, applications, and cloud environments.
  • Manage POA&Ms and support Authorization to Operate (ATO) processes.
  • Develop dashboards, metrics, and reports for senior leadership.

Peraton is a next-generation national security company that provides mission capability integration and transformative IT solutions to protect the nation and allies. It serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces, with employees solving daunting challenges for customers.

$73,900–$83,300/yr
Canada 3w PTO

  • Collaborate across engineering, product, and customer teams to embed security requirements throughout the product lifecycle.
  • Manage security assessments, third-party risk reviews, and vulnerability disclosure processes, including CVE registration.
  • Support AI security governance and secure development practices, including monitoring applications and services beyond core engineering.

They are a growing technology organization that develops products with a strong focus on security and responsible AI adoption. The culture is collaborative and innovation-driven, with remote work across Canada, autonomy, and continuous improvement.

North America Unlimited PTO

  • Manage OKR and epic portfolio across vulnerability, configuration, and attack surface programs.
  • Track dependencies, risks, and blockers across teams and drive resolution or escalate early.
  • Produce executive-ready status reporting and build repeatable planning standards.

ServiceNow is an AI platform that automates workflows and helps 85% of the Fortune 500 work smarter. The company fosters an AI-native culture where technology and talent are unstoppable together.

EMEA

  • Own the end-to-end vulnerability and detection lifecycle, from discovery and triage to remediation and reporting.
  • Lead the VIPR/VMDR function, integrating threat intel, exploit data, and asset context to drive data-backed decisions.
  • Automate vulnerability scoring and reporting pipelines using Python, PowerShell, REST APIs, and tools like Tenable, Qualys, Rapid7, and Wiz.

ServiceNow is the AI control tower for business reinvention, bringing together AI, data, and workflows to help organizations work smarter. The company's platform serves 85% of the Fortune 500, and it fosters an AI-native culture where technology and talent are unstoppable together.

Latin America

  • Drive risk-based vulnerability and exposure management across infrastructure, applications, cloud services, endpoints, and dependencies.
  • Correlate threat intelligence, asset inventory, and environmental context to assess exploitability and reachability.
  • Automate vulnerability ingestion, analysis, prioritization, and remediation tracking with AI-assisted workflows.

Backblaze is the object storage leader in the open cloud movement, providing purpose-built cloud storage to help customers break free from legacy solutions. Founded in 2007, the company went public in 2021, generates over $136M ARR, manages over three billion gigabytes for 500K+ customers, and fosters a culture of diversity, equity, and inclusion.

North America Unlimited PTO

  • Run technical discovery and map customer security workflows to find where they break.
  • Deliver tailored demos and own proofs of value, proving SAFE's impact in customer data.
  • Position SAFE against legacy vulnerability management and speak to both engineers and CISOs.

Safe Security is an AI-driven platform that gives enterprise C-suites a quantified, real-time view of their cyber risk. It is a $170M Series C-funded leader serving 10% of the Fortune 500, with a high-intensity, mission-driven culture.

US

  • Manage internal and external vulnerability scanning, validate findings, and drive remediation across IT systems.
  • Assess and prioritize vulnerabilities based on severity, exploitability, asset exposure, and business impact.
  • Own endpoint and server patching, third-party application patch management, and continuous improvement of the vulnerability management lifecycle.

Mom's Meals is a home-delivered meal service providing fully prepared, refrigerated meal solutions directly to homes nationwide. We are a family-operated business with a compassionate culture focused on the well-being of seniors and patients.

US

  • Lead the Secure Development Engineering team building Airbnb's security products for engineers.
  • Own the roadmap for security products spanning secure SDLC, vulnerability management, infrastructure security, and platform identity.
  • Drive product thinking, adoption, and resolve ownership questions while growing senior and Staff engineers.

Airbnb is a global platform that connects hosts offering unique stays and experiences with guests seeking authentic travel connections. Founded in 2007, the company has grown to over 5 million hosts and welcomes over 2 billion guest arrivals, fostering a culture of inclusion and belonging.

US

  • Build and operate a comprehensive vulnerability management and security operations program.
  • Own the end-to-end vulnerability lifecycle, including scanning, triage, remediation, and reporting.
  • Automate security workflows and develop dashboards to communicate risk to engineering and leadership.

They build and operate a growing technology platform with a focus on security and data protection. The team is small, collaborative, and works in a globally distributed, remote-first environment.

US

  • Lead Portfolio Architects and own service design, Education strategy, and curriculum across ODT/ILT.
  • Drive portfolio maintenance, capacity allocation, and roadmap alignment with product teams.
  • Manage team development, budget, and cross-functional leadership to ensure operational excellence.

Tenable is the Exposure Management company, helping over 40,000 organizations understand and reduce cyber risk. With employees supporting 65% of the Fortune 500 and a culture of belonging, respect, and excellence, Tenable is a great place to work.

US

  • Develop and communicate a compelling product vision and strategy for the non-human identity (NHI) portfolio, aligning with company goals.
  • Own the roadmap, execution, and lifecycle for privileged access and identity security of workloads across cloud and hybrid environments.
  • Collaborate cross-functionally with engineering, design, sales, and marketing to bring modern NHI capabilities to market.

Delinea is the identity security platform that continuously controls what AI agents, humans and machines can do and for how long. They invest in smart, self-motivated, and collaborative people, fostering a culture of innovation and great career progression.

US 16w maternity 16w paternity

  • Own the organizational unit creation, management, reporting, and permissions workflows.
  • Build agent-first experiences and partner with engineering to deliver high-quality products.
  • Work with enterprise customers and cross-functional teams to define product goals.

We help businesses earn and prove trust through continuous security monitoring and compliance automation. We have a kind and talented team with thousands of customers, and are committed to hiring diverse talent.

India

  • Partner closely with engineering to refine architecture and drive security investment while prioritizing velocity.
  • Build secure 'paved roads' and tooling to eradicate entire vulnerability classes, not just fix bugs one by one.
  • Own cross-functional product security projects end to end, and amplify impact through automation and feedback loops.

Bugcrowd is a preemptive security platform that unifies exposure discovery and assessment, offensive testing, and AI-driven intelligence to help organizations avoid real-world risk. Founded in 2012 and based in San Francisco, Bugcrowd is a VC-backed company with a diverse, inclusive culture where people feel like family.

Global 5w PTO

  • Own the end-to-end vulnerability response pipeline, from intake and triage to AI-assisted rule generation and public disclosure.
  • Expand automated WAF protection to ModSecurity and Coraza, validating rules to minimize false positives.
  • Lead and mentor a small team of security analysts while measuring time-to-protection and coverage metrics.

CloudLinux develops security products, including Imunify360, to protect websites against critical threats. The company operates with a remote-first culture, emphasizing ownership, professional growth, and effective collaboration across distributed teams.

$129,280–$161,600/yr
US

  • Lead, coach, and develop a team of Security Consultants through regular feedback and performance management.
  • Drive operational excellence by measuring team performance, identifying automation opportunities, and implementing process improvements.
  • Act as a subject matter expert in web, network, cloud, or mobile security and handle complex escalations and appeals.

Bugcrowd is a preemptive security platform that unifies exposure discovery, offensive testing, and AI-driven intelligence to help organizations identify and validate real-world risk. Based in San Francisco and New Hampshire and supported by top venture capital firms, the company fosters a diverse, family-like culture with a broad range of backgrounds including musicians, adventurers, and parents.

Europe US 6w PTO

  • Conduct threat modeling and risk assessments across product features, AI agents, cloud infrastructure, and data systems to identify vulnerabilities.
  • Partner with engineering, IT, and data teams to embed security into development processes through design reviews and secure coding guidance.
  • Run vulnerability management, bug bounty coordination, incident readiness, and SOC 2 compliance support to build scalable security practices.

n8n is an open workflow orchestration platform for AI-powered automation, combining code freedom with no-code speed. Since 2019, it has grown to 260+ employees across Europe and the US, backed by top investors and a 650,000-developer community.

  • Own the end-to-end product lifecycle for Sophos Firewall and multi-firewall management capabilities in Sophos Central.
  • Define and maintain a clear product roadmap grounded in evolving security needs, competitive dynamics, and business objectives.
  • Conduct customer discovery through interviews and data analysis to uncover high-value network security problems worth solving.

Sophos is a cybersecurity leader defending 600,000 organizations globally with an AI-driven platform and expert-led services. Sophos operates a remote-first working model and is committed to fostering an inclusive and diverse culture.