Manager, Exposure Management (Cybersecurity)

TL;DR

Manager, Exposure Management (Cybersecurity): Leading vulnerability operations, attack surface management, and application security functions with an accent on risk-based prioritization and CTEM. Focus on reducing enterprise risk through AI-assisted workflows, automation, and cross-functional collaboration with engineering and infrastructure teams.

Location: Remote / Hybrid (Must be a US Citizen and authorized to work in the US without sponsorship due to required US Government security clearance)

Salary: $120,000–$160,000

Company

hirify.global is a diversified company specializing in student loan servicing, payments processing, and higher education expertise.

What you will do

• Lead and mentor a team of vulnerability analysts and application security practitioners.
• Oversee a unified exposure management pipeline using the Continuous Threat Exposure Management (CTEM) cycle.
• Implement risk-based prioritization leveraging AI and automation to focus on high-criticality assets.
• Guide enterprise application security programs, including SAST, DAST, and SCA integration into CI/CD workflows.
• Collaborate with GRC and internal audit to ensure process defensibility and alignment with the risk register.
• Communicate complex exposure narratives and business risks to the CISO and executive leadership.

Requirements

• United States Citizenship is mandatory for US Government security clearance.
• Must be authorized to work in the US without current or future visa sponsorship.
• 3–6 years of experience in cybersecurity, focusing on vulnerability and attack surface management.
• 1–2 years of experience in a team lead or management role.
• Proficiency with vulnerability management platforms (e.g., Tenable, Wiz) and AppSec concepts.
• Bachelor's degree in Computer Science, Information Security, or equivalent experience.

Nice to have

• Certifications such as CISSP, CISM, or SANS GIAC (GCIH, GSEC).
• Experience building or maturing a CTEM or exposure management program.
• Familiarity with cloud security in AWS, Azure, or GCP.
• Knowledge of NIST, ISO 27001, or PCI DSS frameworks.
• Scripting skills in Python or PowerShell.

Culture & Benefits

• Comprehensive health package including medical, dental, vision, HSA, and FSA.
• Financial perks such as 401K and student loan repayment programs.
• Generous earned time off and a robust wellness program.
• Employee stock purchase plan and tuition reimbursement.
• Hybrid work flexibility for those located within 30 miles of an office.