DirectJobHub
Jobs · Delaware

Vulnerability Management Leader

Qnity · Wilmington, DE · 2 mo ago
RemoteRemoteFull-time

Position Summary

The Vulnerability Management Lead is responsible for the strategy, governance, and operation of Qnity’s Threat and Vulnerability Management (TVM) program. This role drives the identification, prioritization, remediation, and reporting of vulnerabilities across enterprise environments while leveraging threat intelligence and business context to focus efforts on the risks that matter most. The role partners closely with Cyber Threat Intelligence, Infrastructure, Cloud, Application Support, Compliance, and Service Delivery teams to reduce cyber risk and improve overall security posture.

Key Responsibilities

  • Lead and mature Qnity’s Threat and Vulnerability Management program.

  • Define governance, processes, remediation workflows, metrics, and reporting.

  • Drive cross-functional accountability for vulnerability remediation.

  • Oversee enterprise vulnerability discovery across infrastructure, cloud, applications, and operational technology environments.

  • Manage vulnerability assessment capabilities utilizing Tenable, Wiz, and related technologies.

  • Improve asset visibility through CMDB, IPAM, and inventory integrations.

  • Prioritize vulnerabilities using threat intelligence, exploitability, asset criticality, business impact, and exposure context.

  • Partner with Cyber Threat Intelligence to identify emerging threats, known exploited vulnerabilities, and zero-day risks.

  • Focus remediation efforts on internet-facing systems, critical assets, and high-risk exposures.

  • Drive vulnerability remediation through ServiceNow workflows and escalation processes.

  • Establish and monitor remediation SLAs, exception management, and risk acceptance processes.

  • Coordinate emergency response activities for critical and actively exploited vulnerabilities.

  • Develop dashboards and reporting in Tenable, Wiz, and Power BI.

  • Track vulnerability aging, remediation performance, SLA compliance, risk exposure, and program maturity.

  • Provide executive-level reporting and recommendations to leadership.

  • Improve scan coverage, asset ownership, remediation workflows, and program effectiveness.

  • Identify opportunities for automation, integration, and process optimization.

  • Maintain alignment with security frameworks, compliance requirements, and industry best practices.

Qualifications

  • Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field, required.

  • 8+ years of cybersecurity experience with at least 5 years in Vulnerability Management, Security Operations, Exposure Management, or related disciplines required.

  • Strong knowledge of vulnerability prioritization methodologies, threat intelligence, remediation governance, and executive reporting.

  • Hands-on experience with:

    • Tenable
    • Wiz
    • ServiceNow
    • Recorded Future
    • Asset inventory / CMDB / IPAM platforms

  • Strong communication, stakeholder management, and program leadership skills.

  • Ability to influence and drive outcomes across multiple teams without direct authority.

Preferred Qualifications

  • Experience in cloud security, exposure management, or attack surface management.

  • Familiarity with NIST CSF, CIS Controls, PCI, ISO 27001, or similar frameworks.

  • Experience integrating vulnerability management platforms with ITSM and reporting solutions.

  • Relevant certifications such as CISSP, CISM, CRISC, Security+, or vendor certifications.

Similar jobs