Vulnerability Management & CTEM Lead

Bain & Company; Dallas (TX); Hybrid; USD 61,000 - 73,000; Full time

Benefits offered by this job

401(k) matching

Medical, dental & vision insurance

Job summary

Bain & Company is seeking a Cyber Operations professional to join the Technology Services Group, focusing on vulnerability and exposure management across a global environment. You will deploy and tune Qualys VMDR, Wiz, and Tanium, coordinate remediation SLAs, and integrate threat intel with internal findings.

You will mentor analysts, develop automated dashboards, and communicate risk to leadership while helping drive overall vulnerability management maturity in a hybrid in-office role in

Qualifications

• 3–5 years of hands-on experience in vulnerability management or exposure management.
• Deep understanding of the vulnerability management lifecycle, risk-based remediation, and SLA governance.
• Direct hands-on experience operating Qualys VMDR, Wiz, and Tanium.
• Experience contributing to Continuous Threat Exposure Management programs.

Responsibilities

• Operate and administer core exposure management tools (Qualys VMDR, Wiz, Tanium).
• Establish and enforce remediation SLAs across teams.
• Collaborate with threat intel to map threats to internal findings.
• Develop dashboards and reporting on vulnerability exposure and SLA adherence.
• Mentor junior analysts and set triage standards.
• Provide recommendations on secure configurations and program maturity.

Skills

Experience

Vulnerability management

CTEM

Security tooling

Data & reporting

Windows/Linus/Cloud

Threat intelligence

Communication & Leadership

English proficiency

Education

Bachelor's degree or equivalent

Tools

Qualys VMDR

Wiz

Tanium

Job description

Bain & Company is seeking a Cyber Operations professional to join the Technology Services Group, focusing on vulnerability and exposure management across a global environment. You will deploy and tune Qualys VMDR, Wiz, and Tanium, coordinate remediation SLAs, and integrate threat intel with internal findings.

You will mentor analysts, develop automated dashboards, and communicate risk to leadership while helping drive overall vulnerability management maturity in a hybrid in-office role in