Cyber SDC - Vulnerability Management Project Lead - Senior - Consulting - Location OPEN

EY; Palo Alto (CA); On-site; USD 73,000 - 133,000; Full time

Job summary

An innovative firm is seeking a Cyber SDC - Vulnerability Management Project Lead to enhance their cybersecurity services. This role involves designing and managing vulnerability management solutions tailored to client needs, ensuring effective risk mitigation. The ideal candidate will possess a strong background in vulnerability management tools and cybersecurity principles, with the ability to translate complex technical details into actionable insights. Join a collaborative team that values diversity and supports continuous learning, and help create a better working world through trust and integrity.

Benefits

Health Coverage

Pension

401(k)

Paid Time Off

Flexible Work Arrangements

Continuous Learning Opportunities

Leadership Development

Diversity and Inclusion Initiatives

Qualifications

• 2+ years of experience in vulnerability management or 1-2 years with a graduate degree.
• Hands-on experience with vulnerability management tools and cybersecurity concepts.

Responsibilities

• Develop rapport with clients and monitor project progress.
• Perform vulnerability assessments and manage risks.

Skills

Vulnerability Management Tools

Cybersecurity Concepts

Scripting (Python, PowerShell)

Project Management

Root Cause Analysis

Security Standards (ISO 27001, NIST)

Cloud Security

Communication Skills

Education

Bachelor's Degree

Graduate Degree

Tools

Qualys

Nexpose

Excel

PowerBi

Job description

Cyber SDC - Vulnerability Management Project Lead - Senior - Consulting - Location OPEN

Join to apply for the Cyber SDC - Vulnerability Management Project Lead - Senior - Consulting - Location OPEN role at EY.

About the Job

At EY, you will have the opportunity to build a unique career with the support of our global network, fostering an inclusive culture and leveraging innovative technology. We value your perspective and encourage you to help us improve and grow. Join us to create an exceptional experience for yourself and contribute to a better working world.

The Opportunity

We are seeking an experienced Vulnerability Management (VM) Cyber Managed Services Senior to design, implement, and manage our vulnerability management services. The ideal candidate will have a strong background in vulnerability management tools, services, and teamwork within cybersecurity. This role is crucial in developing tailored solutions for clients to deploy effective vulnerability programs, combining technical expertise with business risk understanding.

Your Key Responsibilities

• Develop rapport with clients by understanding their concerns, needs, and issues, and build a supportive internal network.
• Monitor project progress, manage risks, and keep stakeholders informed.
• Stay updated on industry trends relevant to cybersecurity and client business.
• Assist engagement teams in evaluating client vulnerability management programs across people, process, and technology.
• Own specific parts of vulnerability management solutions tailored to client environments.
• Perform vulnerability assessments to identify weaknesses and evaluate control effectiveness.

Skills And Attributes For Success

• Knowledge of security standards such as ISO 27001, CIS, PCI DSS, NIST, ITIL, COBIT.
• Experience with Windows, Linux, UNIX, and cloud/on-premise OS.
• Hands-on experience with vulnerability management tools (e.g., Qualys, Nexpose).
• Ability to evaluate tools and assist in vendor selection.
• Proficiency in root cause analysis and technical solutions for vulnerabilities.
• Understanding of cybersecurity concepts including vulnerability management, privacy, incident response, governance, and architecture.
• Project management skills, including developing project plans and status updates.
• Scripting experience (e.g., Python, PowerShell).
• Ability to develop metrics using Excel or PowerBi.
• Familiarity with security vulnerabilities, exploits, web application vulnerabilities (OWASP Top 10), cloud security.
• Experience with threat intelligence sources and frameworks like CVE, CWE.
• Skill in translating technical details into actionable insights for diverse audiences.

Minimum Qualifications

• Bachelor's degree with 2+ years of related experience or graduate degree with 1-2 years of experience.
• Hands-on vulnerability management experience.
• Experience serving clients across industries with diverse challenges.
• Strong communication skills, ability to interact with senior management and technical teams.
• Willingness to travel; valid US driver’s license.

Preferred Qualifications

• Interpersonal skills for collaboration and presentation.
• Strategic and technical problem-solving ability.
• Consulting experience (preferred).
• Cybersecurity certifications such as CISSP, CEH, or GSEC (a plus).

What We Offer

Competitive salary range: $73,100 - $132,900 (all US locations), with higher ranges in NYC, Washington, and California. Benefits include health coverage, pension, 401(k), paid time off, and flexible work arrangements. We support continuous learning, leadership development, diversity, and inclusion.

We encourage applications from all qualified candidates. If you meet the criteria, apply promptly. EY is committed to building a better working world through trust, integrity, and diversity.