Vulnerability Management & CTEM Lead

Bain & Company, Inc.; Northern (KY); Hybrid; USD 61,000 - 80,000; Full time

Benefits offered by this job

Discretionary bonus

401(k) plan

Medical insurance

Paid time off

Wellness program

Job summary

Bain & Company, Inc. is seeking a Vulnerability Management Analyst to lead our CTEM and vulnerability management program in a large, multi-cloud environment.

You will own the end-to-end lifecycle, work hands-on with Qualys VMDR, Wiz, and Tanium, and collaborate with IT, infrastructure, and engineering teams globally. Ideal candidates bring 3–5 years of hands-on security operations experience, strong risk prioritization, and excellent communication to influence stakeholders and mentor junior

Qualifications

• .Experience: 3–5 years in vulnerability management/exposure management or security operations.

Responsibilities

• Own and continuously improve the end-to-end vulnerability management lifecycle across the enterprise.
• Operate and administer Qualys VMDR, Wiz, and Tanium including deployment, configuration, and health checks.
• Lead the CTEM program: scope, discovery, prioritization, validation, and mobilization of remediation.
• Prioritize vulnerabilities using CVSS, EPSS, KEV, threat intel, and business criticality.
• Establish/enforce remediation SLAs with IT and engineering teams; drive accountability.
• Collaborate with threat intel teams to connect emerging threats with internal findings.
• Develop and maintain dashboards and reports on vulnerability exposure and SLA adherence.
• Mentor junior analysts and set standards for triage and reporting.
• Provide recommendations on secure configurations and program maturity.

Skills

Vulnerability management

CTEM

Risk prioritization

Threat intelligence

Leadership

English

Tools

Qualys VMDR

Wiz

Tanium

Excel

Job description

Bain & Company, Inc. is seeking a Vulnerability Management Analyst to lead our CTEM and vulnerability management program in a large, multi-cloud environment.

You will own the end-to-end lifecycle, work hands-on with Qualys VMDR, Wiz, and Tanium, and collaborate with IT, infrastructure, and engineering teams globally. Ideal candidates bring 3–5 years of hands-on security operations experience, strong risk prioritization, and excellent communication to influence stakeholders and mentor junior