RemoteLeaf Logo
Log in Sign up

Vulnerability Manager

1 month ago
United States, Canada
Full-time
Senior
Security Analyst
Cybersecurity
AWS Azure CI/CD Cybersecurity GCP Kubernetes Python
Apply Now
BeyondTrust

BeyondTrust

BeyondTrust is a global cyber security company specializing in identity and access security solutions, trusted by over 4,000 customers worldwide.

Professional Services
1K-5K
Founded 1985
$49M raised
View All Jobs 16

Description

  • Design and operate the vulnerability management lifecycle, including intake, triage, risk assessment, assignment, SLA tracking, exceptions, and closure verification.
  • Own FedRAMP 20x vulnerability management, including continuous monitoring, machine-readable evidence, Key Security Indicator reporting, and POA&M management.
  • Establish vulnerability management processes for new products and services, including scan coverage, onboarding, SLAs, and reporting.
  • Assess and prioritize risk using exploitability, exposure, asset criticality, and compensating controls.
  • Drive remediation across product engineering teams, escalate overdue findings, and document time-bound risk acceptances.
  • Automate triage, deduplication, enrichment, summarization, workflow, reporting, and evidence collection using scripting, workflow tools, and AI.
  • Define and validate Security Engineering integration requirements for scanners, ticketing, asset inventory, and dashboards.
  • Own and report program metrics, including SLA attainment, remediation time, vulnerability aging, backlog, coverage, and exception volume.
  • Maintain an authoritative view of critical product exposure and communicate current risk, remediation status, and closure timelines.
  • Lead response to actively exploited and zero-day vulnerabilities, including exposure assessment, mitigation tracking, and stakeholder communication.

Requirements

  • 5+ years of experience in vulnerability management, product security, or security operations with direct process ownership.
  • Experience designing and operating vulnerability management in a regulated or audited environment through assessment cycles.
  • Working knowledge of FedRAMP and NIST SP 800-53, including vulnerability scanning, flaw remediation, continuous monitoring, configuration management, and POA&M management.
  • Hands-on experience with vulnerability and exposure management platforms, cloud security posture tools, container scanning, and software composition analysis.
  • Practical automation skills with Python or equivalent, workflow and reporting tools, and AI assistants.
  • Ability to write technical requirements and partner with Security Engineering through design, delivery, and acceptance.
  • Strong knowledge of CVSS, CISA KEV, EPSS, and risk-based prioritization.
  • Working knowledge of AWS or other cloud services, containers, Kubernetes, CI/CD, web applications, and APIs.
  • Ability to drive remediation across engineering teams without direct authority.
  • Clear communication skills with engineers, executives, auditors, and customers.
  • Experience supporting FedRAMP Moderate, High, or FedRAMP 20x is preferred.
  • Experience with executive and audit reporting, SaaS, identity security, privileged access management, or AI-assisted security workflows is preferred.
  • Cloud security certifications, GIAC, CISSP, or equivalent are preferred.

Benefits

  • Fully remote work for candidates based in North America.
  • Flexible, trust-based culture emphasizing continual learning and professional growth.
  • Inclusive workplace focused on diversity, belonging, and employee development.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

JustMarkets

Security Operations Analyst (L1)

JustMarkets 1-10 Capital Markets

Join a fintech innovation team as a full-time Security Operations Analyst responsible for triaging security alerts, conducting initial investigations, and escalating potential incidents.

Europe Full-time Entry Level Security Analyst
DNS HTTP Linux macOS PowerShell Python SIEM TCP/IP
2 hours, 34 minutes ago
SIXGEN

Threat Hunter/Purple Team Operator

SIXGEN 51-250 Professional Services

SIXGEN is hiring a mid-level Threat Hunter / Purple Team Operator to hunt for threats, support red team engagements, and improve real-time defensive detection for government and critical-infrastructure customers.

United States Full-time Mid Level Security Analyst
Carbon Black Cybersecurity Elasticsearch PowerShell Python SIEM Splunk
2 days, 2 hours ago
PDI Technologies,

Manager, Threat Intelligence

PDI Technologies, 1K-5K Gas Utilities

PDI Technologies is seeking a Threat Intelligence, Threat Hunting, and Detection Engineering leader to build and lead a SOC program that protects more than 12,000 convenience retail, petroleum, hospitality, and automotive customers.

United States Full-time Lead Security Analyst
AWS Azure Cybersecurity Python SIEM Splunk
3 days, 2 hours ago
JustMarkets

Incident Response & DFIR Lead

JustMarkets 1-10 Capital Markets

Lead incident response and digital forensics investigations for a fintech company, coordinating containment, recovery, evidence preservation, and improvements to cyber defense capabilities.

Europe Full-time Lead Security Analyst
Active Directory AWS Linux Network Security PowerShell Python SIEM
1 week, 5 days ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers