Senior Vulnerability Manager - FedRAMP & Automation (Remote)

BeyondTrust, Inc.; United States; Remote; USD 140,000 - 190,000; Full time

Job summary

BeyondTrust in the United States is seeking a Vulnerability Manager to own the product vulnerability management program end to end, focusing on FedRAMP 20x and new product rollouts. This is an operator role with automation, metrics, and an accountable stance to leadership.

You will partner with Security Engineering, drive remediation with engineering teams, and communicate risk to executives and auditors while maintaining a remote-friendly posture.

Qualifications

• 5+ years in vulnerability management, product security, or security operations with ownership of a vulnerability management process.
• Experience designing and operating vulnerability management in a regulated/audited environment.
• Working knowledge of FedRAMP and NIST SP 800-53, vulnerability scanning, continuous monitoring, POA&M management.
• Hands-on operation of enterprise vulnerability platforms, cloud security tools, container scanning, and software composition analysis.
• Automation proficiency: Python or equivalent, workflow tooling, AI-assisted analysis for triage and reporting.
• Ability to write clear technical requirements and partner with security engineering.
• Strong understanding of CVSS, KEV, EPSS, and risk-based prioritization.
• Knowledge of AWS, containers, Kubernetes, CI/CD, web apps, and APIs.

Responsibilities

• Design and operate the vulnerability management process end to end: intake, triage, risk assessment, assignment, SLA tracking, exception handling, and closure verification.
• Own vulnerability management for FedRAMP 20x, including continuous monitoring cadence, machine-readable evidence, KPI reporting, and POA&M lifecycle.
• Stand up vulnerability management for new products and services as they ship: define scan coverage, onboard into the process, set SLAs, and reporting from first release.
• Assess and rank vulnerability risk using multiple factors and defend that ranking to engineers, executives, and assessors.
• Drive remediation with product engineering teams: assign ownership, set timelines, escalate overdue findings, and record time-bound risk acceptances.
• Automate processes where possible using scripting, workflow tooling, and AI-assisted analysis for triage, deduplication, enrichment, and evidence collection.
• Define platform integration requirements for scanners, tickets, asset inventory, and dashboards; validate against operational needs.
• Own program metrics: SLA attainment, MTTR, vulnerability aging, backlog trend, coverage, and exception volume; report to leadership.
• Monitor critical exposure and be the authoritative answer on open findings and closure.
• Lead rapid response for exploited/zero-day vulnerabilities with exposure assessment and mitigation tracking.

Skills

Vulnerability management

Security operations

Automation scripting

Stakeholder comms

Regulated environment

Tools

AWS

Job description

BeyondTrust in the United States is seeking a Vulnerability Manager to own the product vulnerability management program end to end, focusing on FedRAMP 20x and new product rollouts. This is an operator role with automation, metrics, and an accountable stance to leadership.

You will partner with Security Engineering, drive remediation with engineering teams, and communicate risk to executives and auditors while maintaining a remote-friendly posture.