Senior Vulnerability Management & Response Lead

HCLTech; Jacksonville (FL); On-site; USD 140,000 - 180,000; Full time

Benefits offered by this job

Medical, dental, vision

Life insurance

401(k) retirement plan

10 paid holidays per year

10 days of paid time off

Job summary

HCLTech seeks a Senior Vulnerability Manager to lead the organisation's vulnerability response capabilities, coordinating across infrastructure, cloud, application, and technology teams to rapidly identify, assess, remediate, and govern vulnerabilities while ensuring compliance with policies and SLAs.

The role requires extensive experience (9+ years) in vulnerability management or related cyber security disciplines, with strong CVSS knowledge and regulatory exposure.

Qualifications

• Significant experience in Vulnerability Management, Cyber Security Operations, or Cyber Defence.
• Strong understanding of vulnerability scoring methodologies such as CVSS.
• Experience managing technology risk and remediation governance.
• Exposure to regulatory environments such as: NIST SP 800-40, DORA, FCA/PRA, ISO 27001, NIST CSF.

Responsibilities

• Manage the end-to-end vulnerability response lifecycle.
• Prioritise vulnerabilities based on severity, exploitability, business criticality, and threat intelligence.
• Lead and manage vulnerability remediation activities across technology teams.
• Ensure critical and high-risk vulnerabilities are remediated within agreed SLAs.
• Drive accelerated response activities for actively exploited and zero-day vulnerabilities.
• Produce management information and executive reporting.

Skills

Vulnerability management

Cyber security operations

Cyber defence

Regulatory awareness

Tools

CVSS

Remediation governance

Job description

HCLTech seeks a Senior Vulnerability Manager to lead the organisation's vulnerability response capabilities, coordinating across infrastructure, cloud, application, and technology teams to rapidly identify, assess, remediate, and govern vulnerabilities while ensuring compliance with policies and SLAs.

The role requires extensive experience (9+ years) in vulnerability management or related cyber security disciplines, with strong CVSS knowledge and regulatory exposure.