Senior Vulnerability & Attack Surface Manager

Alter Domus; Salt Lake City (UT); On-site; USD 150,000 - 210,000; Full time

Benefits offered by this job

Professional accreditations

Flexible work arrangements

Generous holidays

Employee Share Plan

Career development resources

Job summary

Alter Domus seeks a Senior Security Manager, Vulnerability Management to own and mature the enterprise VM program. You will lead strategy, tooling, and operating cadence across infrastructure, cloud, and apps, while guiding a small team and reporting into governance forums.

You will partner with IT, Security, and DevOps to drive timely remediation, reduce attack surface, and ensure audit readiness in a regulated financial services environment.

Qualifications

• Hands-on expertise in vulnerability/attack surface management.
• Experience representing risk to senior stakeholders.
• Leadership and team development in security teams.

Responsibilities

• Own and mature the enterprise VM program across on-prem, cloud, and hybrid environments.
• Lead a small VM team and drive remediation with cross-functional teams.
• Coordinate risk acceptance and exception processes for non-remediable items.
• Governance, metrics, and reporting to CISO and risk committees.
• Audit support for SOC 2, ISO 27001, and related frameworks.
• Evaluate and implement AI/ML risk scoring and automation in VM.

Skills

Vulnerability management

Attack surface management

Leadership

People-management

Risk communication

Regulated industry experience

CVE/CVSS scoring

Security governance

Cloud security (AWS/Azure)

Stakeholder management

Tools

VM platform

Job description

Alter Domus seeks a Senior Security Manager, Vulnerability Management to own and mature the enterprise VM program. You will lead strategy, tooling, and operating cadence across infrastructure, cloud, and apps, while guiding a small team and reporting into governance forums.

You will partner with IT, Security, and DevOps to drive timely remediation, reduce attack surface, and ensure audit readiness in a regulated financial services environment.