Cloud Vulnerability Management Lead

TikTok USDS Joint Venture; Washington (District of Columbia); On-site; USD 132,000 - 337,000; Full time

Job summary

TikTok USDS Joint Venture LLC is seeking a Vulnerability Management expert to lead the identification, prioritization, and remediation of security flaws across cloud environments and office infrastructure.

This role directs a team of security practitioners, deploying agents in OCI, leveraging Wiz and Qualys, and ensuring ISO 27001 compliance while aligning with patching SLAs and executive reporting.

Qualifications

• 5+ years in Cybersecurity with at least 3+ years leading VM or Security Operations.
• Hands-on experience securing Oracle Cloud Infrastructure (OCI); OCI IAM and Compute security.
• Proficiency with Wiz and Qualys VMDR for cloud and endpoints.
• Strong knowledge of NIST 800-53, ISO 27001, CIS Benchmarks for vulnerability management.
• Ability to write scripts (Python, Bash, PowerShell) to automate security tasks.

Responsibilities

• Lead the Vulnerability Management program for cloud and office infrastructure.
• Coordinate agent deployment, scanning, and asset discovery across OCI and on‑prem networks.
• Prioritize remediation using risk signals and threat intel.
• Collaborate with SRE, IT, and Eng to enforce patch SLAs and remediation workflows.
• Oversee office network security including firewalls and IoT devices.
• Define and report key risk metrics to executives and auditors.
• Administer VM tools and integrate findings with Jira and GRC platforms.
• Drive continuous improvement of the vulnerability lifecycle.

Skills

Cybersecurity

Vulnerability Management

Security Operations

Cloud Security

Scripting (Python/Bash/PowerShell)

OCI Security

Threat Intelligence

Tools

Wiz

Qualys

Terraform

Ansible

Job description

TikTok USDS Joint Venture LLC is seeking a Vulnerability Management expert to lead the identification, prioritization, and remediation of security flaws across cloud environments and office infrastructure.

This role directs a team of security practitioners, deploying agents in OCI, leveraging Wiz and Qualys, and ensuring ISO 27001 compliance while aligning with patching SLAs and executive reporting.