CTEM & Vulnerability Management Leader

PowerToFly; Oregon; Remote; USD 156,000 - 338,000; Full time

Benefits offered by this job

Health benefits

401(k) plan

Employee Stock Purchase Plan (ESPP)

Life and AD&D insurance

Wellbeing program

Job summary

PowerToFly in the United States is seeking a Senior Manager, CTEM & Vulnerability Management to lead the enterprise CTEM and vulnerability program across IT, cloud, OT, and product environments. You will partner with Product Security, Threat Intelligence, Security Operations, Infrastructure, Cloud, and Engineering to reduce exposure through risk-based discovery, prioritization, validation, and remediation.

Key responsibilities include automation for vulnerability discovery and remediation,

Qualifications

• Minimum 10 years of experience in cybersecurity.
• Minimum 3 years leading vulnerability or exposure management teams.
• Experience with vulnerability management tools (Tenable, Qualys, Rapid7, Wiz).

Responsibilities

• Lead the enterprise CTEM and Vulnerability Management program, including strategy, roadmap, and operating model.
• Oversee vulnerability scanning across infrastructure, cloud, endpoint, application, identity, network and OT environments.
• Manage SBOM analysis and coordinated vulnerability disclosure with product engineering teams.
• Prioritize vulnerabilities using CVSS, EPSS, KEV, threat intel and business context.
• Lead attack surface and exposure validation, and breach/attack simulations to test controls.
• Drive automation for discovery, data enrichment, ticketing, remediation workflows and reporting (SOAR, API, Python/PowerShell).
• Support cyber incident investigations with vulnerability context and remediation insight.

Skills

Tenable

Qualys

Rapid7

SOAR automation

Python

PowerShell

Threat intel

CVSS/EPSS

Vulnerability lifecycle

Education

Bachelor's degree in Cybersecurity/CS/IT/Engineering

Master's degree preferred

Tools

SBOM analysis

ServiceNow Vulnerability Response

SOAR platforms

Job description

PowerToFly in the United States is seeking a Senior Manager, CTEM & Vulnerability Management to lead the enterprise CTEM and vulnerability program across IT, cloud, OT, and product environments. You will partner with Product Security, Threat Intelligence, Security Operations, Infrastructure, Cloud, and Engineering to reduce exposure through risk-based discovery, prioritization, validation, and remediation.

Key responsibilities include automation for vulnerability discovery and remediation,