Separation Vulnerability Management Lead

What you'll do

• Implement and maintain vulnerability management processes and technologies to identify and track enterprise risks.
• Operate and support vulnerability scanning platforms by onboarding assets and maintaining data integrity.
• Analyze vulnerability findings to determine risk, exploitability, business impact, and remediation priority.
• Partner with infrastructure, cloud, and application teams to communicate risks and drive remediation.
• Perform technical analysis and validation to distinguish true positives from false positives.
• Support risk-based prioritization by identifying actively exploited vulnerabilities and potential attack paths.
• Create vulnerability reports, metrics, dashboards, and executive communications.
• Monitor emerging threats and attacker techniques to support timely risk reduction.

What we're looking for

• Bachelor’s degree in computer science, information security, MIS, engineering, or related field; or equivalent practical experience.
• 4+ years of relevant experience.
• 6+ years of experience in cybersecurity and/or IT operations with exposure to vulnerability management, security operations, or threat management.
• Experience implementing or supporting vulnerability management platforms such as Tenable, Qualys, Rapid7, Wiz, or Microsoft Defender.
• Experience validating vulnerabilities and understanding remediation across operating systems, networks, cloud platforms, containers, applications, and identity systems.
• Working knowledge of AWS, Azure, or GCP, and basic scripting skills in Python, PowerShell, or Bash.
• Knowledge of CVSS, EPSS, CISA KEV, and frameworks such as NIST, CIS Benchmarks, and ISO 27001.
• Security+, SSCP, CISSP, GCED, GCCC, GMON, Tenable Certified Professional, Qualys Certified Specialist, or equivalent certifications (preferred).