Senior AI-Driven Vulnerability Management Lead

EY; Carson City (NV); Remote; USD 105,000 - 192,000; Full time

Benefits offered by this job

Medical and dental coverage

401(k) plans

Paid time off

Job summary

EY seeks a Senior in AI-Enabled Vulnerability Management to help clients move from scan-and-patch cycles to continuous threat exposure management, applying AI across the vulnerability lifecycle and covering AI systems.

You will design and operate AI-enabled vulnerability and exposure management across cloud, on-prem, container, application, and endpoint environments, build asset foundations, and drive risk-based prioritization with threat intelligence and exploit prediction.

Qualifications

• 3-5 years of relevant experience in vulnerability or exposure management. No bachelor’s degree required.
• Hands-on experience across the full VM lifecycle — discovery, data quality, prioritization, remediation tracking, validation, and reporting — using platforms such as Tenable, Qualys, Rapid7, Wiz, Microsoft Defender, or equivalent.
• Experience applying risk-based prioritization using severity scoring, exploit prediction, threat context, and asset criticality.
• Demonstrated aptitude for applying AI or machine learning to vulnerability management — in production, through experimentation, or via adjacent automation work — with scripting and API integration proficiency (Python, PowerShell, or similar).
• A relevant certification in AI security, vulnerability management, or cybersecurity, or the ability to acquire one after employment.

Responsibilities

• Design and operate AI-enabled vulnerability and exposure management capabilities across cloud, on-premises, container, application, and endpoint environments.
• Build the asset data foundation the program depends on — identity resolution, CMDB reconciliation, and deduplication across overlapping scanner coverage.
• Drive risk-based prioritization using threat intelligence, exploit prediction, known-exploited-vulnerability data, reachability, and business criticality.
• Build and tune AI and agentic workflows that triage findings, generate remediation guidance, and drive closure through orchestrated patching, IaC, and validated fixes.
• Measure what the AI produces — benchmarking triage against human baselines and tracking false-positive reduction and time-to-remediate.
• Apply guardrails, human-in-the-loop thresholds, and auditability to AI-generated actions in client environments.
• Help clients extend vulnerability management to their AI systems, covering model, prompt, integration, and supply chain weaknesses.
• Mentor junior team members and contribute reusable accelerators that outlast a single engagement.

Skills

AI/ML in vulnerability management

Python scripting

PowerShell scripting

Risk-based prioritization

Communication skills

Mentoring

Education

AI security / vulnerability management certification

Tools

Tenable

Qualys

Rapid7

Wiz

Microsoft Defender

Job description

EY seeks a Senior in AI-Enabled Vulnerability Management to help clients move from scan-and-patch cycles to continuous threat exposure management, applying AI across the vulnerability lifecycle and covering AI systems.

You will design and operate AI-enabled vulnerability and exposure management across cloud, on-prem, container, application, and endpoint environments, build asset foundations, and drive risk-based prioritization with threat intelligence and exploit prediction.