Cloud Security & Vulnerability Program Lead

NinjaOne; North Carolina; Hybrid; USD 180,000 - 220,000; Full time

Benefits offered by this job

Medical, dental, and vision insurance

401(k) plan

Unlimited PTO

Hybrid remote work

Career growth opportunities

Job summary

NinjaOne is seeking a Vulnerability & Cloud Security Program Manager to lead enterprise vulnerability management and CSPM programs across on-premises and cloud environments. You will collaborate with engineering, DevOps, and infrastructure teams to reduce risk exposure and advance security maturity.

The role focuses on configuring platforms, automating workflows, and aligning practices with FedRAMP, NIST CSF, ISO 27001, and CIS Controls.

Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or equivalent experience.
• 5+ years in vulnerability management and 2+ years in cloud security.
• Hands-on experience with CSPM tools, vulnerability detection platforms, and automation (Wiz, AWS Inspector, Nessus, OpenSCAP).
• Strong understanding of AWS security best practices and cloud-native architectures.
• Familiarity with vulnerability scoring systems like CVSS and risk-based prioritization.
• Excellent communication, collaboration, and stakeholder management skills.
• Security certifications such as CISSP, AWS Security Specialty, or GIAC Cloud Security are a plus.
• Preferred knowledge of regulatory and compliance frameworks such as PCI DSS, HIPAA, SOX, FedRAMP.

Responsibilities

• Lead and operate the full vulnerability management and CSPM lifecycle, ensuring timely discovery, assessment, prioritization, and remediation.
• Administer and optimize vulnerability management and CSPM platforms, including policies, integrations, reporting, and automation.
• Monitor cloud and infrastructure environments to identify misconfigurations, excessive permissions, and compliance drift, primarily in AWS.
• Partner with engineering and DevOps teams to drive remediation efforts, facilitate triage discussions, and provide technical guidance on complex issues.
• Align security practices with frameworks such as FedRAMP, NIST CSF, ISO 27001, and CIS Controls.
• Track and report key KPIs and risk metrics to leadership, including SLA compliance and vulnerability trends.
• Automate detection, remediation workflows, and tool integrations to enhance efficiency and expand security capabilities.
• Other duties as needed.

Skills

Vulnerability management

Cloud security

Automation

AWS security

CVSS risk scoring

Stakeholder management

Security certifications

Education

Bachelor’s degree in Cybersecurity, Computer Science, Information Technology

Tools

Wiz

AWS Inspector

Nessus

OpenSCAP

Job description

NinjaOne is seeking a Vulnerability & Cloud Security Program Manager to lead enterprise vulnerability management and CSPM programs across on-premises and cloud environments. You will collaborate with engineering, DevOps, and infrastructure teams to reduce risk exposure and advance security maturity.

The role focuses on configuring platforms, automating workflows, and aligning practices with FedRAMP, NIST CSF, ISO 27001, and CIS Controls.