Vulnerability & Application Security Manager

Sysco; United States; On-site; USD 110,000 - 150,000; Full time

Benefits offered by this job

Medical insurance

Vision insurance

401(k)

Paid maternity leave

Pension plan

Paid paternity leave

Tuition assistance

Disability insurance

Student loan assistance

Job summary

A leading foodservice company in the United States is seeking a hands-on Vulnerability & Application Security Manager to enhance its security operations. The role involves managing vulnerability assessments, guiding teams, and ensuring compliance with various security standards. Candidates should have substantial experience in cybersecurity, strong leadership capabilities, and relevant certifications. Competitive benefits are offered.

Qualifications

• 7+ years of experience in cybersecurity, with at least 2 years in a leadership role.
• CISSP, CISM, OSCP, or GIAC certification required.
• Experience with cloud platforms (AWS, Azure, GCP) and container security.

Responsibilities

• Lead the development and evolution of company's security posture.
• Coordinate vulnerability scanning and assessment.
• Mentor staff and foster team collaboration.

Skills

Vulnerability management tools

Hands-on application security

Communication skills

Analytical skills

Project management

Education

Bachelor’s or Master’s degree in Cybersecurity, Computer Science, Information Technology

Tools

Tenable

Wiz

Armis

Job description

Vulnerability & Application Security Manager

Join to apply for the Vulnerability & Application Security Manager role at Sysco.

Job Summary

We are seeking a hands‑on and strategic Vulnerability & Application Security Manager to lead and evolve our security posture across infrastructure and applications. This role is ideal for a technically proficient leader who thrives on solving complex security challenges, actively engages in day‑to‑day operations, and continuously identifies opportunities to mature and scale our security programs.

Duties and Responsibilities

• Scanning, assessment, prioritization, remediation coordination, and tool management (e.g., Tenable, Wiz, Armis).
• SDLC integration, SAST/DAST/SCA scans, threat modeling, secure coding collaboration, bug bounty management.
• Identifying gaps, implementing automation, improving processes, staying current with threats and technologies.
• Developing dashboards and tracking remediation progress, vulnerability trends, and risk posture.
• Ensuring adherence to OWASP, NIST, PCI-DSS, HIPAA, and other relevant frameworks.
• Mentoring staff, leading analysts/engineers, fostering growth and collaboration.

Qualifications

• Education Required: Bachelor’s or Master’s degree in Cybersecurity, Computer Science, Information Technology, or a related field.
• Experience Required: 7+ years of experience in cybersecurity, with at least 2 years in a leadership role or vulnerability management.
• Experience Preferred: 10+ years of experience in cybersecurity, with at least 4 years in a leadership role or vulnerability management.
• Licenses/Certifications Required: CISSP, CISM, OSCP, or GIAC, or equivalent.
• Technical Skills and Abilities:
  • Strong knowledge of vulnerability management tools (e.g., Tenable, Wiz, Armis).
  • Proven hands‑on experience with vulnerability management and application security tools and techniques.
  • Familiarity with CVSS, MITRE ATT&CK, and threat modeling.
  • Experience with cloud platforms (AWS, Azure, GCP) and container security.
  • Excellent communication, analytical, and project management skills.

Seniority level

Mid‑Senior level

Employment type

Full‑time

Job function

Information Technology and Engineering

Industries

Information Services and Technology, Information and Media

Benefits

• Medical insurance
• Vision insurance
• 401(k)
• Paid maternity leave
• Pension plan
• Paid paternity leave
• Tuition assistance
• Disability insurance
• Student loan assistance