Job Description

Position Overview

We are seeking an experienced Vulnerability Management Lead to join our cybersecurity consulting team and lead vulnerability management services for our clients. This role combines hands-on technical expertise with client-facing consulting, service delivery, and continuous improvement.

The successful candidate will be comfortable working directly with client IT and security teams, translating technical vulnerabilities into business risk, driving remediation accountability, and identifying opportunities to improve the scalability and effectiveness of our vulnerability management service.

Key Responsibilities:

Vulnerability Scanning & Technical Operations

• Deploy, configure, and administer enterprise vulnerability management platforms such as Tenable, Qualys, or Rapid7.
• Configure and tune vulnerability scans to improve accuracy, coverage, and performance.
• Implement and maintain credentialed/authenticated scanning across supported infrastructure.
• Establish and maintain vulnerability management processes, standards, and operating procedures.

Remediation Advisory

• Provide clients with practical guidance for remediating identified vulnerabilities.
• Advise on patch management, configuration changes, system hardening, and secure architecture practices.
• Recommend compensating controls when immediate remediation is not practical.
• Help clients evaluate remediation options and understand the associated security and business risks.

Required Qualifications

• 5+ years of experience in vulnerability management, cybersecurity, security engineering, or a related discipline.
• Hands-on experience with at least one major enterprise vulnerability management platform, such as Tenable, Qualys, or Rapid7.
• Strong understanding of vulnerability remediation, patch management, system hardening, and compensating controls.
• Ability to assess vulnerabilities in the context of business risk rather than relying solely on technical severity scores.
• Excellent written, verbal, and presentation skills.
• Ability to manage multiple clients, priorities, and deliverables in a consulting environment.
• Strong analytical and problem-solving skills.

Preferred Qualifications

• Experience leading vulnerability management programs or services for multiple organizations.
• Experience with enterprise environments spanning on-premises infrastructure, cloud, endpoints, networks, and applications.
• Familiarity with frameworks such as NIST CSF, NIST SP 800-40, CIS Controls, ISO 27001, or similar.
• Cybersecurity certifications such as CISSP, CISM, Security+, CEH, or vendor-specific certifications.
• Consulting or managed security services experience.