Cybersecurity Manager, Vulnerability/Exposure Management (Hybrid - Seattle)

Location: Hybrid in Seattle, WA, US; must work from the hirify.global corporate headquarters at least 4 days per week.

Salary: $166,000–$258,000 annual, with possible performance-based incentives or bonuses.

Company

hirify.global is a retail corporation offering technology and cybersecurity operations across enterprise environments.

What you will do

• Lead, coach, and develop attack surface analysts; set priorities, assign work, and support mentoring, training, certifications, and career growth.
• Grow the attack surface management program, define its roadmap, and implement capabilities for visibility across cloud, on-premises, and third-party environments.
• Own attack surface mapping, direct reconnaissance and assessments, and coordinate risk-based triage and expedited remediation of critical vulnerabilities and emerging exposures.
• Drive enterprise-wide initiatives, architectural improvements, process automation, and evaluation of AI technologies for discovery, prioritization, and reporting.
• Partner with threat intelligence, offensive security, AppSec, DevOps, and cloud platform teams to apply threat actor activity, zero-day exploits, MITRE ATT&CK techniques, and secure-by-design practices.
• Present risk and remediation metrics to senior leadership; maintain standards, runbooks, compliance evidence, and oversee tools, vendors, budgets, and project timelines.

Requirements

• 6+ years in security operations, vulnerability management, offensive security, or attack surface management, including 2+ years leading a team or working in a senior or lead capacity.
• Experience building, running, or growing an enterprise attack surface or exposure management program.
• Experience mentoring analysts and developing technical career paths.
• Deep knowledge of MITRE ATT&CK, threat actor TTPs, common attack vectors, offensive security methodologies, external reconnaissance, and ethical hacking.
• Experience implementing cloud security controls in multi-cloud environments using AWS, Azure, and GCP, including exposure of assets such as AWS S3 buckets and Azure Blob storage.
• Working knowledge of vulnerability identification, CSPM, attack surface and exposure management platforms, and network security tools.
• Proficiency in scripting languages such as Python or PowerShell for process automation, plus working knowledge of emerging AI technologies in attack surface management.
• Advanced knowledge of networking, system administration, cloud services, asset management, and enterprise IT architecture principles.
• Understanding of regulatory and compliance controls for vulnerability and attack surface management, including PCI; strong leadership, communication, presentation, and cross-functional influence skills.
• Bachelor’s or Master’s degree in Information Technology, Computer Science, Cybersecurity, or a related field; equivalent experience may replace the degree requirement.

Nice to have

• Experience managing budgets and vendors and evaluating security tools.
• Experience with CVSS, risk prioritization frameworks, and threat intelligence platforms.
• Awareness of patch management, hardening, secure configuration management, lifecycle management, and other cyber hygiene practices.
• Thought leadership applying emerging AI technologies in cybersecurity.
• Advanced certifications such as OSCE, GREM, CISSP, or CISM.

Culture & Benefits

• Hybrid work requires regular attendance at the Seattle corporate headquarters.
• Benefits include medical, vision, dental, retirement, paid time away, life insurance, disability insurance, PTO accruals, and holidays.
• Additional benefits include merchandise discounts and EAP resources; eligibility depends on location, job level, classification, and length of employment.
• Employees may receive performance-based incentives or bonuses.

Hiring process

• Current hirify.global employees must apply through Workday using the Careers and Find Jobs options.
• Background checks are conducted after a conditional offer where required by applicable law; accommodation support is available for applicants with disabilities.