Sr Team Lead- Vulnerability Management

We are seeking a highly motivated and experienced Vulnerability Management Subject Matter Expert (SME) to join our growing security team. In this role, you will be responsible for leading our vulnerability management program, identifying, prioritizing, and remediating security vulnerabilities across our IT infrastructure.

Responsibilities:

• Design, implement, and manage a comprehensive vulnerability management program aligned with industry best practices (e.g., NIST CSF).
• Conduct regular vulnerability assessments and penetration testing using industry-recognized tools and methodologies.
• Prioritize vulnerabilities based on severity, exploitability, and business impact.
• Develop and implement remediation plans for identified vulnerabilities, working cross-functionally with IT and development teams.
• Stay up to date on the latest vulnerability trends and threats, recommending and implementing new tools and processes as needed.
• Track and report on vulnerability management program metrics and KPIs.
• Collaborate with security analysts and engineers to investigate and respond to security incidents.
• Provide security awareness training on vulnerability management best practices to internal stakeholders.

Qualifications:

• 8-10 years of experience in vulnerability management and security operations.
• Proven experience in designing, implementing, and managing vulnerability management programs.
• Strong understanding of vulnerability assessment tools and methodologies (e.g., Rapid7 InsightVM /Nexpose, Nessus, Tenable.io, Qualys).
• Experience with vulnerability prioritization frameworks (e.g., CVSS).
• Excellent understanding of network security concepts, firewalls, intrusion detection/prevention systems (IDS/IPS).
• Experience working in a cross-functional environment and collaborating with IT and development teams.
• Strong communication, analytical, and problem-solving skills.
• Excellent written and verbal communication skills.
• Ability to work independently and manage multiple priorities.

Preferred Skills:

• Experience with Security Information and Event Management (SIEM) systems.
• Experience with scripting languages (e.g., Python, Bash).
• Experience with penetration testing methodologies (e.g., OWASP Top 10).
• Certifications in vulnerability management (e.g., GSEC, CISSP) a plus.