AI-Driven Vulnerability Lead

TIAA; Charlotte (NC); On-site; USD 116,000 - 152,000; Full time

Job summary

TIAA is seeking an experienced Lead Information Security Vulnerability professional in the United States to integrate AI into vulnerability management and drive triage of AI-generated findings. This individual-contributor role focuses on validating findings, prioritizing remediation, and maturing AI-powered scanning workflows.

The candidate will build AI-driven validation agents, establish validation criteria, and collaborate across security teams to ensure rapid, accurate remediation at machine

Qualifications

• 5+ years of experience in information security, vulnerability management, assessment, or related security operations.
• Experience with vulnerability prioritization frameworks (CVSS, EPSS, CISA KEV) and risk-based remediation.
• Certifications are a plus but not required (e.g., CISSP, GWAPT, GCIH, OSCP).

Responsibilities

• Builds and matures AI-enabled vulnerability scanning capabilities.
• Develops AI-based validation agents and verification workflows to reduce false positives at scale.
• Leads triage, validation, and prioritization of findings from AI-enabled tools.
• Drives integration of AI capabilities into vulnerability management BAU, improving speed and accuracy.
• Collaborates with threat intel, remediation, AI, platform, and app teams to ensure timely resolution of critical vulnerabilities.

Skills

Vulnerability assessment

AI-enabled scanning

Risk-based prioritization

Triage & remediation

Security operations

Education

Bachelor’s degree or higher

Tools

Tenable

Wiz

Snyk

ServiceNow

CI/CD tooling

Job description

TIAA is seeking an experienced Lead Information Security Vulnerability professional in the United States to integrate AI into vulnerability management and drive triage of AI-generated findings. This individual-contributor role focuses on validating findings, prioritizing remediation, and maturing AI-powered scanning workflows.

The candidate will build AI-driven validation agents, establish validation criteria, and collaborate across security teams to ensure rapid, accurate remediation at machine