Senior Cybersecurity Vulnerability Manager

Texas Capital; Richardson (TX); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

Health insurance

Wellness program

Fertility and family building aids

Life and disability insurance

401K retirement match

Paid leave

Paid holidays

PTO

Job summary

Texas Capital seeks an experienced security professional to lead vulnerability management across on-premises and cloud environments. You will identify weaknesses, drive remediation, and work with cross-functional teams to reduce risk while aligning with GRC and regulatory expectations.

You’ll analyze findings, generate executive-level reports, stay current with threats, and help design defensible security programs. A strong background in CVSS, ATT&CK, cloud security, and scripting is required.

Qualifications

• Bachelor's degree in Information Security, IT, Computer Science, Engineering, or related field.
• Minimum 10 years of experience in an appropriate domain.
• Strong expertise in enterprise Vulnerability Management programs across network, agent, cloud-native, application, container and infrastructure vulnerability assessment technologies.
• Experience integrating vulnerability management practices into enterprise governance, risk management, and compliance (GRC), and operational risk programs.
• Deep understanding of vulnerability scoring methodologies and frameworks, including CVSS, EPSS, OWASP Top 10, SANS/CWE Top 25, KEV and Threat intelligence-driven risk prioritization models.
• Strong knowledge of attack methodologies, adversary tactics, techniques, and procedures (TTPs), and the MITRE ATT&CK Framework.
• Strong understanding of OS Windows, Linux, databases, networks, cloud platforms, virtualization, APIs, containers, and emerging tech.
• Strong understanding of cloud security risks across AWS, Azure, GCP, and SaaS environments.
• Advanced programming/scripting capabilities (Python, PowerShell, Bash, Ruby, or similar) to automate assessment, reporting, and remediation.
• Deep understanding of technology risk management, control frameworks, and regulatory expectations for banks/fintech.
• Experience collaborating with regulators, examiners, internal and external audits during cybersecurity reviews.
• Experience developing defensible documentation and executive reporting for regulatory/audit needs.
• Ability to present vulnerability management maturity, risk metrics, remediation strategies, and risk acceptance to regulators and executives.
• Experience establishing risk exception frameworks, SLAs, and KRIs.

Responsibilities

• Lead the identification, assessment, prioritization, and management of vulnerabilities across on‑premises and cloud infrastructure, networks, applications, databases, and platforms.
• Proactively identify security weaknesses and reduce organizational risk.
• Collaborate with cross‑functional technology, infrastructure, cloud, and application teams to remediate vulnerabilities and configuration weaknesses, ensuring timely risk reduction and compliance with remediation requirements.
• Analyze findings and provide detailed reports daily, weekly and monthly with actionable recommendations for improving security posture.
• Stay updated on cybersecurity threats, trends, and technologies to ensure cutting‑edge testing strategies.
• Assist in developing security programs and documentation to support regulatory and audit requirements.

Skills

Vulnerability management

GRC integration

Python scripting

Regulatory knowledge

MITRE ATT&CK

Cloud security

Windows/Linux

Communication skills

Threat intelligence

Automation

Education

Bachelor's degree

Job description

Texas Capital seeks an experienced security professional to lead vulnerability management across on-premises and cloud environments. You will identify weaknesses, drive remediation, and work with cross-functional teams to reduce risk while aligning with GRC and regulatory expectations.

You’ll analyze findings, generate executive-level reports, stay current with threats, and help design defensible security programs. A strong background in CVSS, ATT&CK, cloud security, and scripting is required.