Manager Continuous Threat Exposure Management

About the role

Dauch is looking for a Manager, Continuous Threat Exposure Management to join our team. The Manager - Continuous Threat Exposure Management (CTEM) is essential to Dauch’s mission of secure business operations. This role entails identifying threats, managing vulnerabilities, and overseeing security testing programs.

Responsibilities

• Oversee and administer the Continuous Threat Exposure Management (CTEM) and Penetration Testing program across enterprise and manufacturing environments.
• Develop and implement strategic plans for detecting threats, identifying vulnerabilities, prioritizing risks, and mitigating them.
• Supervise internal and external penetration tests, red teaming, and breach simulations.
• Provide leadership and guidance for vulnerability lifecycle management, including scanning, analysis, remediation tracking, and executive reporting.
• Partner with enterprise infrastructure and application teams to ensure vulnerabilities are understood and addressed according to risk.
• Collaborate with manufacturing and OT teams to improve plant cyber security through vulnerability management testing.
• Integrate threat intelligence into vulnerability prioritization processes and ensure alignment with MITRE ATT&CK and threat-informed defense frameworks.
• Support audit and compliance initiatives by maintaining documentation and evidence related to threat and vulnerability management.
• Deliver cyber risk awareness and education for business stakeholders.
• All other duties as assigned.

Requirements

• Bachelor’s degree in Cybersecurity, Computer Science, Engineering, or a related field.
• 10+ years of progressive experience in cybersecurity, with at least 3 years in threat and vulnerability management and/or penetration testing.
• Proven experience managing enterprise-scale vulnerability management tools (e.g., Tenable, Qualys, Rapid7) and penetration testing tools (e.g., Burp Suite, Metasploit, Cobalt Strike).
• Familiarity with regulatory and industry frameworks such as NIST CSF, ISO 27001, NIST SP 800-115, MITRE ATT&CK, and OWASP Top 10.
• Demonstrated ability to manage large-scale vulnerability programs across IT and OT environments.
• Strong understanding of network protocols, operating systems, cloud security (AWS/Azure), and application security concepts.
• Excellent leadership, communication, and stakeholder engagement skills.
• Willingness and ability to travel as needed (up to approximately 20%).

Preferred Qualifications

• Experience working in or with large, global manufacturing organizations.
• Relevant certifications such as OSCP, CISSP, GIAC GPEN, GWAPT, or CISM.
• Experience with secure SDLC, DevSecOps, and vulnerability management in CI/CD pipelines.
• Familiarity with industrial control systems (ICS) or OT cybersecurity (e.g., ISA/IEC 62443, NIST 800-82).

About Dauch

Dauch Corporation is a premier Driveline and Metal Forming supplier serving the global automotive industry with a powertrain-agnostic product portfolio that supports electric, hybrid, and internal combustion vehicles. The company is headquartered in Detroit, MI, with operations that span 24 countries and more than 175 locations. Formed through the acquisition of Dowlais Group plc and its subsidiaries - GKN Automotive and GKN Powder Metallurgy, Dauch unites deep engineering roots with global manufacturing capabilities and an entrepreneurial spirit to move mobility forward.