Manager Continuous Threat Exposure Management

American Axle & Mfg., Inc.; Detroit (MI); On-site; USD 150,000 - 190,000; Full time

Job summary

Dauch Corporation seeks a Manager of Continuous Threat Exposure Management to lead CTEM, vulnerability management, and penetration testing across enterprise and manufacturing environments. The role requires coordinating with IT, OT, and product security teams to detect threats and prioritize mitigations.

Responsibilities include supervising red/purple team exercises, reporting to executives, and aligning activities with MITRE ATT&CK and other security frameworks. Travel up to 20% may be required.

Qualifications

• 10+ years in cybersecurity with at least 3 years in threat and vulnerability management and/or penetration testing.
• Experience managing enterprise-scale vulnerability tools (e.g., Tenable, Qualys, Rapid7) and penetration testing tools (e.g., Burp Suite, Metasploit, Cobalt Strike).
• Familiarity with risk frameworks such as NIST CSF, ISO 27001, MITRE ATT&CK, and OWASP Top 10.

Responsibilities

• Oversees and administers the CTEM and Penetration Testing program across enterprise and manufacturing environments.
• Develops and implements plans for detecting threats, identifying vulnerabilities, prioritizing risks, and mitigating them.
• Supervises internal and external penetration tests, red teaming, and breach simulations.
• Leads vulnerability lifecycle management including scanning, analysis, remediation tracking, and executive reporting.
• Partners with IT, OT, and product security teams to address vulnerabilities and align with risk.

Skills

Threat management

Vulnerability management

Penetration testing

Leadership

Security governance

Cloud security

Education

Bachelor's degree

Tools

Tenable

Qualys

Rapid7

Burp Suite

Metasploit

Cobalt Strike

Job description

Job Posting Title

Manager Continuous Threat Exposure Management

Job Description Summary

Dauch is looking for a Manager, Continuous Threat Exposure Management to join our team. The Manager - Continuous Threat Exposure Management (CTEM) is essential to Dauch's mission of secure business operations. This role entails identifying threats, managing vulnerabilities, and overseeing security testing programs. Responsibilities include leading vulnerability assessments, red/purple team exercises, and penetration testing services. Collaboration with IT, OT, product security, and vendors is crucial to mitigate risks while supporting business innovation and digital transformation.

Job Description:

• Oversees and administers the Continuous Threat Exposure Management (CTEM) and Penetration Testing program throughout both enterprise and manufacturing environments.
• Develops and implements strategic plans for detecting threats, identifying vulnerabilities, prioritizing risks, and mitigating them.
• Supervises internal and external penetration tests, red teaming, and breach simulations.
• Provides leadership and guidance for vulnerability lifecycle management, including scanning, analysis, remediation tracking, and executive reporting.
• Partners with enterprise infrastructure and application teams to ensure vulnerabilities are understood and addressed according to risk.
• Collaborates with manufacturing and OT teams to improve plant cyber security through vulnerability management testing.
• Integrates threat intelligence into vulnerability prioritization processes and ensure alignment with MITRE ATT&CK and threat-informed defense frameworks.
• Supports audit and compliance initiatives by maintaining documentation and evidence related to threat and vulnerability management.
• Delivers cyber risk awareness and education for business stakeholders.
• All other duties as assigned.

Required Skills and Education

• Bachelor's degree in Cybersecurity, Computer Science, Engineering, or a related field.
• 10+ years of progressive experience in cybersecurity, with at least 3 years in threat and vulnerability management and/or penetration testing.
• Proven experience managing enterprise-scale vulnerability management tools (e.g., Tenable, Qualys, Rapid7) and penetration testing tools (e.g., Burp Suite, Metasploit, Cobalt Strike).
• Familiarity with regulatory and industry frameworks such as NIST CSF, ISO 27001, NIST SP 800-115, MITRE ATT&CK, and OWASP Top 10.
• Demonstrated ability to manage large-scale vulnerability programs across IT and OT environments.
• Strong understanding of network protocols, operating systems, cloud security (AWS/Azure), and application security concepts.
• Excellent leadership, communication, and stakeholder engagement skills.
• Willingness and ability to travel as needed (up to approximately 20%).

Preferred Qualifications:

• Experience working in or with large, global manufacturing organizations.
• Relevant certifications such as OSCP, CISSP, GIAC GPEN, GWAPT, or CISM.
• Experience with secure SDLC, DevSecOps, and vulnerability management in CI/CD pipelines.
• Familiarity with industrial control systems (ICS) or OT cybersecurity (e.g., ISA/IEC 62443, NIST 800-82).

About Dauch:

Dauch Corporation is a premier Driveline and Metal Forming supplier serving the global automotive industry with a powertrain-agnostic product portfolio that supports electric, hybrid, and internal combustion vehicles. The company is headquartered in Detroit, MI, with operations that span 24 countries and more than 175 locations. Formed through the acquisition of Dowlais Group plc and its subsidiaries - GKN Automotive and GKN Powder Metallurgy, Dauch unites deep engineering roots with global manufacturing capabilities and an entrepreneurial spirit to move mobility forward. Visit www.dauch.com to learn more.

Dauch will not discriminate against any Associate or applicant for employment because of age, race, color, gender, religion, weight, height, marital status, sexual orientation, genetic history or information, gender identity or expression, disability, protected veteran status, national origin, or other characteristic protected by law. Dauch will take affirmative action to ensure that applicants are employed, and that Associates are treated equally during employment, without regard to their age, race, color, gender, religion, weight, height, marital status, sexual orientation, genetic history or information, gender identity or expression, disability, protected veteran status, national origin, or other characteristic protected by law. For the Disabled Job Seeker: We offer reasonable accommodations for qualified disabled individuals who are applicants for employment. To request assistance or accommodations, please e-mail [e-mail]. Dauch is an equal opportunity/affirmative action employer.