CTEM Security Leader: Threat & Vulnerability Programs

American Axle & Mfg., Inc.; Detroit (MI); On-site; USD 150,000 - 190,000; Full time

Job summary

Dauch Corporation seeks a Manager of Continuous Threat Exposure Management to lead CTEM, vulnerability management, and penetration testing across enterprise and manufacturing environments. The role requires coordinating with IT, OT, and product security teams to detect threats and prioritize mitigations.

Responsibilities include supervising red/purple team exercises, reporting to executives, and aligning activities with MITRE ATT&CK and other security frameworks. Travel up to 20% may be required.

Qualifications

• 10+ years in cybersecurity with at least 3 years in threat and vulnerability management and/or penetration testing.
• Experience managing enterprise-scale vulnerability tools (e.g., Tenable, Qualys, Rapid7) and penetration testing tools (e.g., Burp Suite, Metasploit, Cobalt Strike).
• Familiarity with risk frameworks such as NIST CSF, ISO 27001, MITRE ATT&CK, and OWASP Top 10.

Responsibilities

• Oversees and administers the CTEM and Penetration Testing program across enterprise and manufacturing environments.
• Develops and implements plans for detecting threats, identifying vulnerabilities, prioritizing risks, and mitigating them.
• Supervises internal and external penetration tests, red teaming, and breach simulations.
• Leads vulnerability lifecycle management including scanning, analysis, remediation tracking, and executive reporting.
• Partners with IT, OT, and product security teams to address vulnerabilities and align with risk.

Skills

Threat management

Vulnerability management

Penetration testing

Leadership

Security governance

Cloud security

Education

Bachelor's degree

Tools

Tenable

Qualys

Rapid7

Burp Suite

Metasploit

Cobalt Strike

Job description

Dauch Corporation seeks a Manager of Continuous Threat Exposure Management to lead CTEM, vulnerability management, and penetration testing across enterprise and manufacturing environments. The role requires coordinating with IT, OT, and product security teams to detect threats and prioritize mitigations.

Responsibilities include supervising red/purple team exercises, reporting to executives, and aligning activities with MITRE ATT&CK and other security frameworks. Travel up to 20% may be required.