Strategic Vulnerability Lead & SOAR Engineer

New Balance Athletics, Inc.; Richardson (TX); Hybrid; USD 105,000 - 156,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

401K

Tuition reimbursement

Lifestyle stipend

Parental leave

Vacation 4 weeks

Job summary

New Balance Athletics, Inc. is seeking a Senior Vulnerability Management & SOAR Engineer to lead the enterprise vulnerability program across on‑premises, cloud, and containers.

You will own discovery, validation, prioritization, remediation coordination, and security automation, partnering with Infrastructure, DevOps, and Security teams to reduce cyber risk. The role blends hands‑on vulnerability operations with strategic program ownership, including developing policies, dashboards, and

Qualifications

• Experience leading enterprise vulnerability management programs across hybrid environments.
• Familiarity with CVE, CVSS, CISA KEV, exploit intel.
• Experience integrating vulnerability workflows into CI/CD pipelines.

Responsibilities

• Own and mature the enterprise Vulnerability Management program across on-premises, cloud, containerized, endpoint, network, embedded, and application environments.
• Lead remediation efforts across technical teams to meet SLAs and risk targets.
• Design, develop, and maintain SOAR playbooks to automate vulnerability intake, triage, and reporting.
• Create executive metrics and reporting on risk reduction, remediation trends, and asset coverage.

Skills

Vulnerability Mgmt

SOAR automation

Python scripting

PowerShell

Bash scripting

REST APIs

CI/CD pipelines

Threat intel

Cloud security

Tools

Tenable

Qualys

Rapid7

Microsoft Defender Vulnerability Management

Azure

AWS

GCP

Microsoft Sentinel

Cortex XSOAR

Splunk SOAR

Swimlane

Tines

Job description

New Balance Athletics, Inc. is seeking a Senior Vulnerability Management & SOAR Engineer to lead the enterprise vulnerability program across on‑premises, cloud, and containers.

You will own discovery, validation, prioritization, remediation coordination, and security automation, partnering with Infrastructure, DevOps, and Security teams to reduce cyber risk. The role blends hands‑on vulnerability operations with strategic program ownership, including developing policies, dashboards, and