TL;DR

Senior Vulnerability Manager (Cybersecurity): Lead and mature an enterprise vulnerability management program focusing on risk reduction across commercial and public-sector deployments with an accent on vulnerability discovery, prioritization, and remediation. Focus on integrating vulnerability management into product development and cloud operations while ensuring compliance with major security frameworks.

Location: 100% remote with hybrid option for candidates based in El Dorado Hills, CA or Chicago, IL metro area

Company

%hirify_global% Security is a leading cybersecurity company specializing in privileged access management and zero-trust security solutions, trusted globally and certified by FedRAMP, StateRAMP, SOC 2, and ISO 27001.

What you will do

Own and govern the enterprise vulnerability management strategy and SLAs across all environments
Build scalable processes for vulnerability discovery, risk scoring, and remediation in multi-cloud and SaaS infrastructure
Manage vulnerability scanning tools and ensure continuous coverage
Correlate vulnerability data with threat intelligence to drive risk-based prioritization
Integrate vulnerability tracking into CI/CD and ticketing systems and automate workflows
Develop dashboards and communicate risk metrics to leadership and stakeholders

Requirements

7+ years of experience in vulnerability management, security engineering, or cyber risk management
Proven success managing enterprise-scale vulnerability programs in SaaS and public-sector environments
Expertise in vulnerability scanning, CVE/CVSS scoring, exploit analysis, and risk prioritization
Strong understanding of cloud environments (AWS, GCP, Azure) and modern application stacks
Ability to communicate technical risk clearly to executive and non-technical stakeholders
Knowledge of compliance frameworks: NIST SP 800-53, CIS Controls, ISO 27001, SOC 2, FedRAMP, StateRAMP

Nice to have

Certifications such as CISSP, CISM, OSCP, or GIAC GCVS/GCFA
Experience with automation, scripting, and data analytics tools (Python, PowerShell, Splunk, Elastic dashboards)
Background in security architecture, red teaming, or exploit development
Familiarity with vulnerability disclosure programs and bug bounty coordination
Experience presenting vulnerability metrics to senior leadership or board-level stakeholders
Bachelor’s degree in Cybersecurity, Computer Science, or related field

Culture & Benefits

Medical, dental, and vision insurance including domestic partnerships
Employer paid life insurance and supplemental life insurance options
Voluntary short and long term disability insurance
401K plan with Roth and traditional options
Generous paid time off including bereavement and jury duty
Above market annual bonuses