Vulnerability Management Lead – Attack Surface & Remediation

Ethereum Technologies; Illinois; On-site; USD 140,000 - 170,000; Full time

Job summary

Ethereum Technologies is seeking a Vulnerability Management Specialist to lead continuous discovery, assessment, and automation of the attack surface across on-prem, cloud, and applications. You will map assets, prioritize risks, and drive remediation with cross-functional teams to strengthen the organization’s security posture.

Ideal candidates have 10+ years in IT security with 5–6 years in vulnerability management, plus hands-on experience with vulnerability management tools and penetration

Qualifications

• 10+ years in IT security or related field.
• 5–6 years in vulnerability management role.
• Strong knowledge of vulnerability management, penetration testing, and attack surface monitoring tools.
• Ability to communicate risk to CXO-level stakeholders.

Responsibilities

• Lead or participate in security assessments and vulnerability management initiatives.
• Catalog internet-facing assets and maintain an up-to-date inventory.
• Assess assets for misconfigurations and exposures.
• Prioritize risks based on safety, business impact, and exploitability.
• Coordinate remediation with cross-functional teams.
• Review dashboards in vulnerability management platforms for insights.
• Harden configurations with system and network administrators.

Skills

Vulnerability management

Threat exposure management

Attack surface monitoring

Penetration testing

Risk assessment

Tools

Vulnerability scanners

Threat intelligence platforms

Job description

Ethereum Technologies is seeking a Vulnerability Management Specialist to lead continuous discovery, assessment, and automation of the attack surface across on-prem, cloud, and applications. You will map assets, prioritize risks, and drive remediation with cross-functional teams to strengthen the organization’s security posture.

Ideal candidates have 10+ years in IT security with 5–6 years in vulnerability management, plus hands-on experience with vulnerability management tools and penetration