Senior Manager, Cybersecurity, CTEM & Vulnerability Intelligence - Remote

Stryker; Kalamazoo (MI); On-site; USD 156,000 - 338,000; Full time

Benefits offered by this job

Health benefits

401(k) plan

Employee Stock Purchase Plan (ESPP)

Wellbeing program

Job summary

Stryker is seeking an experienced cybersecurity leader to own enterprise vulnerability and exposure management across technology and products. You will shape strategy, oversee scanning and triage, and coordinate remediation with engineering teams to reduce risk.

Strong automation and threat intelligence emphasis will be required. The role emphasizes collaboration with Infrastructure, Cloud, App Security, and Engineering teams, leveraging platforms like Tenable, Qualys, Rapid7, and ServiceNow to

Qualifications

• Bachelor's or higher in a related field; 10+ years in cybersecurity.
• 3+ years leading vulnerability/exposure teams.
• Experience with product vulnerabilities, SBOM analysis, and remediation with engineering teams.
• Experience with automation via SOAR, APIs, Python, or PowerShell.

Responsibilities

• Lead enterprise CTEM and vulnerability management program strategy and roadmaps.
• Oversee vulnerability scanning across infrastructure, cloud, endpoints, apps, identity, network, OT.
• Manage vulnerability lifecycle with SBOM analysis and coordinated disclosure support.
• Prioritize vulnerabilities using CVSS, EPSS, KEV, threat intel, and business context.
• Drive automation for discovery, remediation workflows, and reporting via SOAR, APIs, Python, PowerShell.

Skills

Vulnerability management

Python

PowerShell

SOAR automation

Risk assessment

Threat intelligence

Education

Bachelor's degree in Cybersecurity, Computer Science, IT, Engineering

Master's degree (preferred)

Tools

Tenable

Qualys

Rapid7

Wiz

ServiceNow Vulnerability Response

Job description

Preference will be given to candidates residing in the Eastern or Central time zones.

What you will do:

Technical Responsibilities:

• Lead the enterprise CTEM and Vulnerability Management program, including its strategy, roadmap, and operating model.
• Oversee vulnerability scanning and assessment across infrastructure, cloud, endpoint, application, identity, network, and OT environments.
• Manage the product security vulnerability lifecycle with Product Security, including intake, triage, risk assessment, remediation tracking, software bill of materials (SBOM) analysis, and coordinated vulnerability disclosure support.
• Prioritize vulnerabilities and exposures using CVSS, EPSS, CISA Known Exploited Vulnerabilities (KEV), threat intelligence, asset criticality, and business context.
• Lead attack surface management, exposure validation, and breach and attack simulation activities to confirm exploitability and control effectiveness.
• Evaluate emerging vulnerabilities, exploits, and threat intelligence affecting enterprise systems, marketed products, and embedded systems.
• Drive automation for vulnerability discovery, data enrichment, ticketing, remediation workflows, and reporting through SOAR platforms, APIs, Python, or PowerShell.
• Support cyber incident investigations with vulnerability context, exposure analysis, and remediation expertise.

Leadership & People Management Responsibilities:

• Partner with Infrastructure, Cloud, Application, Product Security, and Engineering teams to establish risk-based service-level agreements, drive remediation, and track plans of action and milestones.
• Establish governance standards, quality assurance procedures, and documentation for vulnerability and exposure management operations.
• Measure and report exposure reduction, remediation performance, validation results, and operational metrics to executive stakeholders.
• Lead vulnerability management, exposure management, or product security vulnerability teams.

Knowledge and Capabilities:

• Analyze complex vulnerability data and large volumes of exposure telemetry to identify risk and guide response.
• Translate technical findings, remediation status, and risk trends into clear written, verbal, and presentation-ready updates for technical and executive audiences.

What You Need:

Required Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related discipline.
• Minimum 10 years of experience in cybersecurity.
• Minimum 3 years of experience leading vulnerability management, exposure management, or product security vulnerability teams.
• Experience managing product vulnerabilities, including triage, coordinated vulnerability disclosure, SBOM analysis, and remediation with product engineering teams.
• Experience with Tenable, Qualys, Rapid7, Wiz, ServiceNow Vulnerability Response, or equivalent vulnerability and exposure management technologies.
• Experience implementing automation through SOAR platforms, APIs, Python, or PowerShell.

Preferred Qualifications

• Master's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related discipline.
• CISSP, CISM, GEVA, GPEN, GIAC, Tenable, Qualys, or equivalent professional certification.

United States of America Pay Ranges:

• USN: $155,900 - $259,700 USD Annual
• US5: $163,700 - $272,700 USD Annual
• US10: $171,500 - $285,700 USD Annual
• US15: $179,300 - $298,700 USD Annual
• US20: $187,100 - $311,600 USD Annual
• US30: $202,700 - $337,600 USD Annual

Health benefits include: Medical and prescription drug insurance, dental insurance, vision insurance, critical illness insurance, accident insurance, hospital indemnity insurance, personalized healthcare support, wellbeing program and tobacco cessation program. Financial benefits include: Health Savings Account (HSA), Flexible Spending Accounts (FSAs), 401(k) plan, Employee Stock Purchase Plan (ESPP), basic life and AD&D insurance, and short-term disability insurance.

Stryker offers innovative products and services in MedSurg, Neurotechnology, Orthopaedics and Spine that help improve patient and healthcare outcomes. Alongside its customers around the world, Stryker impacts more than 150 million patients annually. Depending on customer requirements employees and new hires in sales and field roles that require access to customer accounts as a function of the job may be required to obtain various vaccinations as an essential function of their role.