Cyber - AI-Enabled Vulnerability Management - Senior - Consulting

EY; Chantilly (VA); Remote; USD 105,000 - 192,000; Full time

Benefits offered by this job

Medical and dental coverage

Pension and 401(k) plans

Paid time off

Job summary

EY is seeking a Senior in AI-Enabled Vulnerability Management to help clients move from scan-and-patch cycles to continuous threat exposure management (CTEM) across cloud, on-prem, container, application and endpoint environments. You will design AI-enabled capabilities and mentor junior colleagues while contributing reusable accelerators.

Qualifications include 3-5 years in vulnerability or exposure management, hands-on VM lifecycle experience with Tenable, Qualys, Rapid7, Wiz or Defender, and

Qualifications

• 3–5 years of experience in vulnerability or exposure management.
• Hands-on experience across the full VM lifecycle—discovery, data quality, prioritization, remediation tracking, validation, and reporting.
• Experience applying AI or ML to vulnerability management, with scripting and API integration proficiency.

Responsibilities

• Design and operate AI-enabled vulnerability and exposure management across cloud, on-prem, container, application and endpoint environments.
• Build the asset data foundation—identity resolution, CMDB reconciliation, deduplication.
• Drive risk-based prioritization using threat intel, exploit prediction, data on known exploits, reachability, and business criticality.
• Build and tune AI workflows that triage findings, generate remediation guidance, and drive patching orchestration.
• Measure AI output by benchmarking triage against human baselines and reducing false positives/time-to-remediate.
• Apply guardrails and human-in-the-loop thresholds to AI actions in client environments.
• Help clients extend vulnerability management to AI systems, including model, prompt, integration, and supply chain weaknesses.
• Mentor junior team members and contribute reusable accelerators.

Skills

Human-forward skills

Problem solving

Judgment

Builder mindset

Learning agility

Platform-agnostic

Tools

Tenable

Qualys

Rapid7

Wiz

Microsoft Defender

Job description

Location: Anywhere in Country

At EY, we’re all in to shape your future with confidence. We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go. Join EY and help to build a better working world.

The Opportunity

Clients across every industry look to us for trusted solutions to increasingly complex threats. As a Senior in AI-Enabled Vulnerability Management, you’ll help them move from scan-and-patch cycles to continuous threat exposure management (CTEM) — applying AI across the vulnerability lifecycle and building the automation that makes it repeatable. You’ll also help clients extend their programs to cover the AI systems they’re adopting.

Your Key Responsibilities

• Design and operate AI-enabled vulnerability and exposure management capabilities across cloud, on-premises, container, application, and endpoint environments.
• Build the asset data foundation the program depends on — identity resolution, CMDB reconciliation, and deduplication across overlapping scanner coverage.
• Drive risk-based prioritization using threat intelligence, exploit prediction, known-exploited-vulnerability data, reachability, and business criticality.
• Build and tune AI and agentic workflows that triage findings, generate remediation guidance, and drive closure through orchestrated patching, IaC, and validated fixes.
• Measure what the AI produces — benchmarking triage against human baselines and tracking false-positive reduction and time-to-remediate.
• Apply guardrails, human-in-the-loop thresholds, and auditability to AI-generated actions in client environments.
• Help clients extend vulnerability management to their AI systems, covering model, prompt, integration, and supply chain weaknesses.
• Mentor junior team members and contribute reusable accelerators that outlast a single engagement.

Skills And Attributes For Success

You’ll need a blend of technical and business skills, along with the judgment to navigate complex problems and make informed decisions.

• Human-forward skills — empathy, curiosity, adaptability, and clear communication.
• Advanced problem-solving and critical thinking.
• Sound judgment in validating AI output, including spotting false positives and unsupported findings.
• A builder’s instinct — a preference for creating something reusable over configuring a tool once.
• Digital and learning agility in adopting new AI tooling.
• A platform-agnostic mindset, evaluating tooling based on client need rather than a single vendor stack.

To qualify for the role, you must have:

• 3-5 years of relevant experience in vulnerability or exposure management. No bachelor’s degree required.
• Hands-on experience across the full VM lifecycle — discovery, data quality, prioritization, remediation tracking, validation, and reporting — using platforms such as Tenable, Qualys, Rapid7, Wiz, Microsoft Defender, or equivalent.
• Experience applying risk-based prioritization using severity scoring, exploit prediction, threat context, and asset criticality.
• Demonstrated aptitude for applying AI or machine learning to vulnerability management — in production, through experimentation, or via adjacent automation work — with scripting and API integration proficiency (Python, PowerShell, or similar).
• A relevant certification in AI security, vulnerability management, or cybersecurity, or the ability to acquire one after employment.

Ideally, you’ll also have

• Production experience using AI to reduce vulnerability noise at scale.
• Experience benchmarking or evaluating AI-assisted security workflows.
• Experience with automated remediation — patch orchestration, IaC fixes, or pull-request-generated fixes with rollback.
• Experience assessing or securing AI and machine learning systems.
• Strong written and verbal communication, including translating technical detail for non-technical audiences.
• Experience defining VM metrics, KPIs, and executive dashboards that demonstrate risk reduction.
• Familiarity with consulting delivery methods and current cybersecurity trends.

What We Look For

We seek top performers with a passion for cybersecurity and a proven track record of success. Ideal candidates are those who demonstrate agility, critical thinking, and the ability to work collaboratively in a dynamic environment — and who are energized by using AI to solve vulnerability management problems at scale.

What We Offer You

At EY, we harness our collective strength to empower you to shape your future with confidence through professional growth, personal fulfillment and an inclusive culture.

• The salary range for this job is:
• New York City, Boston, and Washington DC Metro Areas, Washington State, and Southern California offices – $125,800 to $209,700
• Bay Area California offices – $131,100 to $218,500
• All other offices locations in the US, including Sacramento – $104,800 to $192,200
• Individual salaries within these ranges are determined through a wide variety of factors including but not limited to education, experience, knowledge, skills and geography. In addition, our Total Rewards package includes medical and dental coverage, pension and 401(k) plans, and a wide range of paid time off options.

EY | Building a better working world

EY is building a better working world by creating new value for clients, people, society and the planet, while building trust in capital markets.

Enabled by data, AI and advanced technology, EY teams help clients shape the future with confidence and develop answers for the most pressing issues of today and tomorrow.

EY teams work across a full spectrum of services in assurance, consulting, tax, strategy and transactions. Fueled by sector insights, a globally connected, multi-disciplinary network and diverse ecosystem partners, EY teams can provide services in more than 150 countries and territories.

All in to shape the future with confidence.

EY provides equal employment opportunities to applicants and employees without regard to race, color, religion, age, sex, sexual orientation, gender identity/expression, pregnancy, genetic information, national origin, protected veteran status, disability status, or any other legally protected basis, including arrest and conviction records, in accordance with applicable law.

EY is committed to providing reasonable accommodation to qualified individuals with disabilities including veterans with disabilities. If you have a disability and either need assistance applying online or need to request an accommodation during any part of the application process, please call 1-800-EY-HELP3, select Option 2 for candidate related inquiries, then select Option 1 for candidate queries and finally select Option 2 for candidates with an inquiry which will route you to EY’s Talent Shared Services Team (TSS) or email the TSS at [e-mail].