Cloud & Infrastructure Vulnerability Leader

TikTok USDS Joint Venture; Washington (District of Columbia); On-site; USD 132,000 - 337,000; Full time

Job summary

TikTok USDS Joint Venture LLC is seeking a Vulnerability Management expert to lead the identification, prioritization, and remediation of security flaws across our cloud environments and office infrastructure in Washington, DC.

You will architect a risk-based VM program, supervise a team of security practitioners, and partner with SRE, IT, and Engineering to automate patching and remediation, while aligning with ISO 27001 and industry standards.

Qualifications

• 5+ years in Cybersecurity with at least 3+ years leading a Vulnerability Management or Security Operations team.
• Hands-on experience securing Oracle Cloud Infrastructure (OCI) including OCI VCNs, IAM, and Compute security.
• Proficient with Wiz and Qualys VMDR/Policy Compliance.
• Knowledge of NIST 800-53, ISO 27001, CIS Benchmarks as they apply to vulnerability and configuration management.
• Ability to write scripts (Python, Bash, or PowerShell) to automate data export or interact with security tool APIs.

Responsibilities

• Lead VM function for USDS across Cloud and Office infrastructure.
• Use Wiz to perform agentless scanning and analyze Security Graph for misconfigurations.
• Deploy and tune Qualys VMDR for endpoints, servers, and network devices.
• Prioritize remediation based on threat intel and business context.
• Coordinate with SRE, IT, and Engineering to set patch SLAs and automate remediation.
• Oversee security of office networks, firewalls, Wi-Fi controllers, and IoT devices per USDS standards.
• Define and report risk metrics (MTTR, scan coverage, patch compliance).
• Act as VM tool admin and integrate findings into Jira and GRC.

Skills

Vulnerability Management

Team Leadership

Cloud Security

OCI Security

Scripting

Tools

Wiz

Qualys VMDR

Job description

TikTok USDS Joint Venture LLC is seeking a Vulnerability Management expert to lead the identification, prioritization, and remediation of security flaws across our cloud environments and office infrastructure in Washington, DC.

You will architect a risk-based VM program, supervise a team of security practitioners, and partner with SRE, IT, and Engineering to automate patching and remediation, while aligning with ISO 27001 and industry standards.