BeyondTrust

BeyondTrust

BeyondTrust is a global cyber security company specializing in identity and access security solutions, trusted by over 4,000 customers worldwide.

Professional Services
1K-5K
Founded 1985
$49M raised

Description

  • Design and operate the vulnerability management lifecycle, including intake, triage, risk assessment, assignment, SLA tracking, exceptions, and closure verification.
  • Own FedRAMP 20x vulnerability management, including continuous monitoring, machine-readable evidence, Key Security Indicator reporting, and POA&M management.
  • Establish vulnerability management processes for new products and services, including scan coverage, onboarding, SLAs, and reporting.
  • Assess and prioritize risk using exploitability, exposure, asset criticality, and compensating controls.
  • Drive remediation across product engineering teams, escalate overdue findings, and document time-bound risk acceptances.
  • Automate triage, deduplication, enrichment, summarization, workflow, reporting, and evidence collection using scripting, workflow tools, and AI.
  • Define and validate Security Engineering integration requirements for scanners, ticketing, asset inventory, and dashboards.
  • Own and report program metrics, including SLA attainment, remediation time, vulnerability aging, backlog, coverage, and exception volume.
  • Maintain an authoritative view of critical product exposure and communicate current risk, remediation status, and closure timelines.
  • Lead response to actively exploited and zero-day vulnerabilities, including exposure assessment, mitigation tracking, and stakeholder communication.

Requirements

  • 5+ years of experience in vulnerability management, product security, or security operations with direct process ownership.
  • Experience designing and operating vulnerability management in a regulated or audited environment through assessment cycles.
  • Working knowledge of FedRAMP and NIST SP 800-53, including vulnerability scanning, flaw remediation, continuous monitoring, configuration management, and POA&M management.
  • Hands-on experience with vulnerability and exposure management platforms, cloud security posture tools, container scanning, and software composition analysis.
  • Practical automation skills with Python or equivalent, workflow and reporting tools, and AI assistants.
  • Ability to write technical requirements and partner with Security Engineering through design, delivery, and acceptance.
  • Strong knowledge of CVSS, CISA KEV, EPSS, and risk-based prioritization.
  • Working knowledge of AWS or other cloud services, containers, Kubernetes, CI/CD, web applications, and APIs.
  • Ability to drive remediation across engineering teams without direct authority.
  • Clear communication skills with engineers, executives, auditors, and customers.
  • Experience supporting FedRAMP Moderate, High, or FedRAMP 20x is preferred.
  • Experience with executive and audit reporting, SaaS, identity security, privileged access management, or AI-assisted security workflows is preferred.
  • Cloud security certifications, GIAC, CISSP, or equivalent are preferred.

Benefits

  • Fully remote work for candidates based in North America.
  • Flexible, trust-based culture emphasizing continual learning and professional growth.
  • Inclusive workplace focused on diversity, belonging, and employee development.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Senior Information Security Internal Auditor

Everbridge 1K-5K Internet Software & Services

Everbridge is seeking a fully remote Senior Information Security Internal Auditor to manage security audit and compliance activities supporting its critical event management technology for enterprise and government customers.

CI/CD DevSecOps Terraform
1 day, 3 hours ago

Senior Security Analyst - Germany

Coalition 251-1K Insurance

Coalition is seeking a Senior Security Analyst in Germany to assess cyber risk, investigate incidents and claims, and turn technical findings into customer guidance and improvements to insurance products and internal security processes.

Cybersecurity HIPAA Network Security Penetration Testing TCP/IP
1 day, 3 hours ago

Cyber Security Administrator

N-iX 1K-5K Internet Software & Services

N-iX is seeking a Junior Cybersecurity Administrator to support its global software development organization by maintaining and improving information security processes.

Cybersecurity DNS Linux macOS SIEM TCP/IP
1 day, 3 hours ago

Senior Security Risk Analyst, GRC

DoorDash 10K-50K Air Freight & Logistics

DoorDash is hiring a Security Risk Specialist on its Global Governance, Risk and Compliance team to manage security risk assessments, treatment plans, reporting, exceptions, and proactive control improvement across DoorDash, Wolt, and Deliveroo.

4 days, 3 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers