Senior Cybersecurity CTEM & Vulnerability Lead

PowerToFly; Kalamazoo (MI); Remote; USD 156,000 - 260,000; Full time

Benefits offered by this job

Health benefits

401(k) plan

Employee Stock Purchase Plan

Wellbeing program

Job summary

PowerToFly seeks a Senior Manager, CTEM & Vulnerability Management to lead enterprise CTEM and vulnerability programs across IT, cloud, OT, and product environments.

You will partner with Product Security, Threat Intelligence, Security Operations, Infrastructure, Cloud, and Engineering to reduce exposure through risk-based discovery, prioritization, validation, and remediation. Expect governance, reporting, and ongoing automation initiatives.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related discipline.
• Minimum 10 years of experience in cybersecurity.
• Minimum 3 years of experience leading vulnerability management, exposure management, or product security vulnerability teams.
• Experience managing product vulnerabilities, including triage, coordinated vulnerability disclosure, SBOM analysis, and remediation with product engineering teams.
• Experience with Tenable, Qualys, Rapid7, Wiz, ServiceNow Vulnerability Response, or equivalent technologies.
• Experience implementing automation through SOAR platforms, APIs, Python, or PowerShell.

Responsibilities

• Lead the enterprise CTEM and Vulnerability Management program, including strategy, roadmap, and operating model.
• Oversee vulnerability scanning and assessment across infrastructure, cloud, endpoint, application, identity, network, and OT environments.
• Manage product security vulnerability lifecycle with Product Security, including intake, triage, risk assessment, remediation tracking, SBOM analysis, and coordinated vulnerability disclosure support.
• Prioritize vulnerabilities using CVSS, EPSS, KEV, threat intelligence, asset criticality, and business context.
• Lead attack surface management, exposure validation, and breach and attack simulation activities.
• Evaluate emerging vulnerabilities, exploits, and threat intelligence affecting enterprise systems and products.
• Drive automation for vulnerability discovery, data enrichment, ticketing, remediation workflows, and reporting through SOAR, APIs, Python, or PowerShell.
• Support cyber incident investigations with vulnerability context and remediation expertise.
• Partner with various teams to establish governance standards, QA procedures, and document exposure management operations.
• Measure and report exposure reduction, remediation performance, and operational metrics to executives.

Skills

Automation scripting

Leadership

Vulnerability management

Risk-based prioritization

Education

Bachelor's degree in Cybersecurity/CS/IT/Engineering

Master's degree in Cybersecurity/CS/IT/Engineering

Tools

Tenable

Qualys

Rapid7

Wiz

ServiceNow Vulnerability Response

Job description

PowerToFly seeks a Senior Manager, CTEM & Vulnerability Management to lead enterprise CTEM and vulnerability programs across IT, cloud, OT, and product environments.

You will partner with Product Security, Threat Intelligence, Security Operations, Infrastructure, Cloud, and Engineering to reduce exposure through risk-based discovery, prioritization, validation, and remediation. Expect governance, reporting, and ongoing automation initiatives.