Vulnerability Management Team Lead (Cybersecurity)

Location: Fully remote, based anywhere in the United States

Salary: $109,900–$185,260 USD base salary for US-based employees; compensation may also include a bonus or role-specific commission and potential equity participation.

Company

hirify.global develops cybersecurity and identity security software and operates a vulnerability management program across company systems and data.

What you will do

• Lead daily operations for a team of Vulnerability Management Analysts, providing technical guidance, mentorship, and escalation support.
• Manage the full vulnerability lifecycle across cloud and corporate infrastructure, from discovery and triage through assignment and remediation.
• Develop risk-based prioritization using asset criticality, threat intelligence, active exploitation, CVSS, CVE, and EPSS context.
• Coordinate remediation with IT, DevOps, Engineering, risk, compliance, business units, and asset owners while tracking SLA compliance.
• Improve operational efficiency through automation, including data ingestion, Jira ticketing integrations, and VM data integration with SIEM/SOAR.
• Produce KPIs, KRIs, scorecards, and dashboards, including MTTR, remediation compliance, and vulnerability density.

Requirements

• 5–7+ years of cybersecurity experience, including 2–3+ years in vulnerability management leadership or senior operational roles.
• Expert hands-on experience with enterprise vulnerability assessment platforms such as Qualys, CrowdStrike, Wiz, or Orca.
• Deep understanding of vulnerability classification, risk versus severity, and patching for Windows, Mac, Linux, and containerized environments.
• Strong familiarity with AWS, Azure, GCP, and complex corporate infrastructure.
• Ability to lead teams, collaborate across technical and business groups, investigate ambiguous data, and communicate clearly with analysts and executives.
• Must be based in the United States for this fully remote role.

Nice to have

• Python or PowerShell proficiency for API integrations, data analysis, and automation.
• Experience with NIST, ISO 27001, SOC 2, or FedRAMP requirements.
• Background in penetration testing, threat intelligence, attack surface management, or establishing a vulnerability management program.
• CISSP, CISM, AWS, or related certifications.

Culture & Benefits

• Fully remote work for employees based anywhere in the United States.
• Medical, dental, vision, disability, life, and AD&D coverage.
• 401(k) plan with company matching, HSA employer contributions, and flexible spending accounts.
• Flexible vacation policy, eight paid holidays, sick leave, and paid parental leave.
• Employee assistance, care counseling, legal assistance, critical illness, accident, hospital indemnity, and pet insurance options.
• Employees without the required credential must obtain AWS Certified Cloud Practitioner or AWS Certified Security – Specialty within the first year.