Senior Manager, Cybersecurity, CTEM & Vulnerability Intelligence - Remote

Stryker Employment Company, LLC; Portage (MI); Remote; USD 156,000 - 338,000; Full time

Job summary

Stryker seeks a Senior Manager for CTEM & Vulnerability Management to lead enterprise vulnerability programs across IT, cloud, OT, and product environments. You will partner with Product Security, Threat Intelligence, Security Operations, Infrastructure, Cloud, and Engineering to reduce exposure through risk-based discovery, prioritization, validation, and remediation.

You will drive automation for vulnerability discovery, data enrichment, and remediation workflows using SOAR platforms, APIs,

Qualifications

• Bachelor's degree in cybersecurity, computer science, information technology, engineering, or related discipline.
• Minimum 10 years of experience in cybersecurity.
• Minimum 3 years of experience leading vulnerability management or product security teams.
• Experience with vulnerability platforms (Tenable, Qualys, Rapid7, Wiz) and remediation processes.

Responsibilities

• Lead enterprise CTEM and vulnerability program strategy, roadmap, and operating model.
• Oversee vulnerability scanning across infra, cloud, endpoint, application, identity, network, and OT.
• Drive automation for vulnerability discovery, remediation workflows, and reporting (SOAR, APIs, Python/PowerShell).
• Collaborate with Product Security, Threat Intelligence, IT, and Engineering to reduce exposure.

Skills

Vulnerability management

Team leadership

Automation & scripting

Threat intelligence

Education

Bachelor's degree in cybersecurity / CS / IT / engineering

Master's degree in cybersecurity / CS / IT / engineering

Tools

Tenable

Qualys

Rapid7

SBOM analysis

ServiceNow Vulnerability Response

Job description

Work Flexibility: Remote Preference will be given to candidates residing in the Eastern or Central time zones.

As a Senior Manager, CTEM & Vulnerability Management, you will lead the enterprise Continuous Threat Exposure Management (CTEM) and Vulnerability Management function across enterprise IT, cloud, operational technology (OT), and product environments. You will partner with Product Security, Threat Intelligence, Security Operations, Infrastructure, Cloud, and Engineering teams to reduce exposure through risk-based discovery, prioritization, validation, and remediation.

What you will do:

Technical Responsibilities:

• Lead the enterprise CTEM and Vulnerability Management program, including its strategy, roadmap, and operating model.
• Oversee vulnerability scanning and assessment across infrastructure, cloud, endpoint, application, identity, network, and OT environments.
• Manage the product security vulnerability lifecycle with Product Security, including intake, triage, risk assessment, remediation tracking, software bill of materials (SBOM) analysis, and coordinated vulnerability disclosure support.
• Prioritize vulnerabilities and exposures using CVSS, EPSS, CISA Known Exploited Vulnerabilities (KEV), threat intelligence, asset criticality, and business context.
• Lead attack surface management, exposure validation, and breach and attack simulation activities to confirm exploitability and control effectiveness.
• Evaluate emerging vulnerabilities, exploits, and threat intelligence affecting enterprise systems, marketed products, and embedded systems.
• Drive automation for vulnerability discovery, data enrichment, ticketing, remediation workflows, and reporting through SOAR platforms, APIs, Python, or PowerShell.
• Support cyber incident investigations with vulnerability context, exposure analysis, and remediation expertise.

Leadership & People Management Responsibilities:

• Partner with Infrastructure, Cloud, Application, Product Security, and Engineering teams to establish risk-based service-level agreements, drive remediation, and track plans of action and milestones.
• Establish governance standards, quality assurance procedures, and documentation for vulnerability and exposure management operations.
• Measure and report exposure reduction, remediation performance, validation results, and operational metrics to executive stakeholders.
• Lead vulnerability management, exposure management, or product security vulnerability teams.

Knowledge and Capabilities:

• Analyze complex vulnerability data and large volumes of exposure telemetry to identify risk and guide response.
• Translate technical findings, remediation status, and risk trends into clear written, verbal, and presentation-ready updates for technical and executive audiences.

What You Need:

Required Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related discipline.
• Minimum 10 years of experience in cybersecurity.
• Minimum 3 years of experience leading vulnerability management, exposure management, or product security vulnerability teams.
• Experience managing product vulnerabilities, including triage, coordinated vulnerability disclosure, SBOM analysis, and remediation with product engineering teams.
• Experience with Tenable, Qualys, Rapid7, Wiz, ServiceNow Vulnerability Response, or equivalent vulnerability and exposure management technologies.
• Experience implementing automation through SOAR platforms, APIs, Python, or PowerShell.

Preferred Qualifications

• Master's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related discipline.
• CISSP, CISM, GEVA, GPEN, GIAC, Tenable, Qualys, or equivalent professional certification.

United States of America Pay Ranges:

USN: $155,900 - $259,700 USD Annual

US5: $163,700 - $272,700 USD Annual

US10: $171,500 - $285,700 USD Annual

US15: $179,300 - $298,700 USD Annual

US20: $187,100 - $311,600 USD Annual

US30: $202,700 - $337,600 USD Annual

View the U.S. work location and transparency guide to find the pay range for your location.

Travel Percentage: None

Stryker Corporation is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, ethnicity, color, religion, sex, gender identity, sexual orientation, national origin, disability, or protected veteran status. Stryker is an EO employer - M/F/Veteran/Disability.

Stryker Corporation will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor’s legal duty to furnish information.

Stryker is one of the world's leading medical technology companies and, together with its customers, is driven to make healthcare better. We offer innovative products and services in Orthopaedics, Medical and Surgical, and Neurotechnology and Spine that help improve patient and hospital outcomes. We are proud to be named one of the World's Best Workplaces! For more information, visit: www.stryker.com

Work Flexibility Remote – Role allows you to work the majority to 100% of time from an alternate workplace. These roles could have travel expectations, and you must work within the country of the job requisition location.

Field-based – You can expect to regularly work a majority to 100% of time at customer facilities and has a set territory or expectation to travel within a set boundary. Almost all sales roles would likely be qualified as field-based.

Onsite – Role is 100% located at a Stryker facility. Some ad hoc flexibility may be available depending on role, level, and job requirements. Manufacturing roles and any role that requires public presence at the office would qualify under this category.

Hybrid – You can expect to regularly work in both an alternate workplace and a Stryker facility. Roles that are partially remote or co-located would qualify as hybrid, and the expectation to be onsite would be defined and agreed upon by your manager/supervisor.