Vulnerability Management & App Security Manager

PSEG; Town of Oyster Bay (NY); Hybrid; USD 140,000 - 200,000; Full time

Benefits offered by this job

Medical benefits

Dental benefits

Vision benefits

Parental leave

401(k) match

Tuition reimbursement

Generous PTO

Job summary

PSEG LI is seeking a senior information security leader to direct cyber assessment and vulnerability management across the network and systems. You will drive risk-based testing, remediation, and reporting, while coordinating with IT, security, and business units.

The role requires experience in application security, DevSecOps vulnerability management, and cyber exploitation techniques in an AI-driven world. Strong communication and people management are essential.

Qualifications

• Bachelor's degree and 8 years of cyber security experience.
• Experience in vulnerability/compliance management, pentesting, or threat hunting.
• Ability to present to management and executive leadership.
• Strong teamwork, facilitation, and relationship-building skills.
• Excellent time management and multi-tasking abilities.
• Ability to communicate with technical and non-technical audiences.
• Compliance with 10 CFR 810 is required.

Responsibilities

• Oversee cyber assessment and vulnerability management lifecycle.
• Advise IT and security teams; identify process gaps and remediation.
• Participate in change management and vulnerability remediation before go-live.
• Contribute to incident response and threat intelligence efforts.
• Develop and implement advanced vulnerability dashboards and metrics.
• Conduct security assessments and red team exercises; report findings.

Skills

Vulnerability management

Penetration testing

Threat hunting

Executive communication

Team leadership

Risk assessment

Education

Bachelor's degree

CISSP certification

Job description

PSEG LI is seeking a senior information security leader to direct cyber assessment and vulnerability management across the network and systems. You will drive risk-based testing, remediation, and reporting, while coordinating with IT, security, and business units.

The role requires experience in application security, DevSecOps vulnerability management, and cyber exploitation techniques in an AI-driven world. Strong communication and people management are essential.