Remote Vulnerability Management Lead - Risk Reduction

SailPoint; United States; On-site; USD 110,000 - 185,000; Full time

Benefits offered by this job

Health insurance

401(k) with company match

Paid time off

Holidays

Job summary

SailPoint is seeking a Vulnerability Management (VM) Team Lead to oversee the daily operations of our VM program, leading a growing team and partnering with Attack Surface Management and VM Architect to drive proactive, threat-informed risk reduction across cloud and on-prem assets.

Fully remote within the United States, this role focuses on risk-based prioritization, remediation lifecycle, and automation initiatives (data ingestion, Jira integration, SIEM/SOAR).

Qualifications

• 5-7+ years in Cybersecurity, with 2-3+ years in a leadership, team lead, or senior operational role focused specifically on Vulnerability Management.
• Expert-level, hands-on experience with enterprise vulnerability assessment tools and platforms (e.g., Qualys, CrowdStrike, Wiz, Orca).
• Deep technical understanding of vulnerability classification (CVSS, CVE, EPSS), risk vs. severity, and modern patching processes for Windows, Mac, Linux, and containerized environments.
• Strong familiarity with securing modern complex cloud environments (AWS, Azure, GCP) and corporate infrastructure.

Responsibilities

• Oversee the day-to-day operational activities of a team of Vulnerability Management Analysts. Provide technical guidance, mentorship, and support to elevate the overall skill set of the group.
• Manage the end-to-end vulnerability lifecycle, ensuring continuous discovery, triage, and assignment of vulnerabilities across cloud and corporate infrastructure.
• Develop and enforce a prioritization framework that utilizes risk context beyond standard CVSS scores, factoring in asset criticality, internal threat intelligence, and active exploitation in the wild.
• Collaborate with the risk team and business leaders to establish risk acceptance criteria and service level objectives (SLOs), ensuring remediation efforts align with the organizational risk appetite.
• Serve as an escalation point and subject matter expert to help VM analysts and asset owners understand risks, identify dependencies, and facilitate the remediation process.
• Track remediation progress across business units and ensure compliance with defined SLAs.
• Drive continuous improvement in the efficiency of vulnerability operations by identifying opportunities for automation across the tech stack (e.g., automating data ingestion, ticketing system integration via Jira, and integrating VM data into SIEM/SOAR).
• Generate operational KPIs and KRIs, such as MTTR, Remediation Compliance Rate, and vulnerability density; provide program performance reporting, scorecards, and dashboards for leadership.

Skills

Vulnerability Management

Leadership

Cybersecurity

Cloud security

Tools

Qualys

CrowdStrike

Wiz

Orca

Job description

SailPoint is seeking a Vulnerability Management (VM) Team Lead to oversee the daily operations of our VM program, leading a growing team and partnering with Attack Surface Management and VM Architect to drive proactive, threat-informed risk reduction across cloud and on-prem assets.

Fully remote within the United States, this role focuses on risk-based prioritization, remediation lifecycle, and automation initiatives (data ingestion, Jira integration, SIEM/SOAR).