Vulnerability Management Lead – Cloud & Office Infra

TikTok USDS Joint Venture; Washington (District of Columbia); On-site; USD 132,000 - 337,000; Full time

Job summary

TikTok USDS Joint Venture LLC seeks a Vulnerability Management expert to lead the end-to-end vulnerability lifecycle across cloud and office infrastructure. You will architect a risk-based program, guide a team of security practitioners, and drive remediation with tools like Wiz and Qualys to minimize attack surfaces while aligning with USDS standards.

The role requires hands-on cloud security, strong leadership, and the ability to translate technical findings into actionable guidance for

Qualifications

• 5+ years in Cybersecurity with 3+ years leading VM or Security Ops.
• Hands-on OCI security (OCI IAM, Compute); AWS/Azure/GCP ok.
• Proficient with Wiz and Qualys VMDR; strong tooling mastery.
• Knowledge of NIST 800-53, ISO 27001, CIS Benchmarks.
• Ability to script (Python/Bash/PowerShell) for automation.

Responsibilities

• Program Leadership: Build and scale VM for Cloud and Office Infrastructure.
• Cloud-Native Security: Use Wiz for agentless scanning and config checks.
• Infrastructure Scanning: Deploy/ tune Qualys across endpoints and servers.
• Risk-Based Prioritization: Correlate data with threat intel and business context.
• Cross-Functional Orchestration: Coordinate with SRE/IT/Engineering for patch timelines.
• Office Infrastructure Security: Harden office networks and devices per USDS standards.
• Reporting & Governance: Define/ report key risk metrics for execs and auditors.
• Tooling Optimization: Admin VM tools; integrate findings into Jira/GRC.

Skills

Vulnerability Management

Security Operations Leadership

Cloud Security (OCI)

Scripting/Automation

Frameworks & Compliance

Threat Intelligence correlation

Education

OCI Architect/Security Associate

Qualys Certified Specialist

Wiz training

CISSP/CISM/CCSP

Tools

Wiz

Qualys VMDR

Job description

TikTok USDS Joint Venture LLC seeks a Vulnerability Management expert to lead the end-to-end vulnerability lifecycle across cloud and office infrastructure. You will architect a risk-based program, guide a team of security practitioners, and drive remediation with tools like Wiz and Qualys to minimize attack surfaces while aligning with USDS standards.

The role requires hands-on cloud security, strong leadership, and the ability to translate technical findings into actionable guidance for