Vulnerability Management Lead for CTEM & Cloud Security

Bain & Company; Boston (MA); Hybrid; USD 67,000 - 80,000; Full time

Job summary

Bain & Company is seeking a Security Operations professional to lead vulnerability and exposure management within its Cyber Operations team. The role involves hands-on operation of Qualys VMDR, Wiz, and Tanium, plus driving remediation standards and SLA governance in a large-scale multi-cloud environment.

Based in the Boston area with a hybrid in-office model, you will mentor junior analysts, align with IT and infrastructure teams, and communicate risk to senior leadership.

Qualifications

• Experience: 3–5 years hands-on in vulnerability/exposure management or security operations.
• Must operate and report on vulnerability management lifecycle and SLA governance.
• Hands-on with Qualys VMDR, Wiz, Tanium including deployment and reporting.

Responsibilities

• Operate and administer core exposure management tools including deployment, configuration, tuning, integration, and health checks.
• Establish and enforce remediation SLAs with IT and infra teams to drive accountability for high-risk exposures.
• Collaborate with threat intelligence teams to connect emerging threats with internal findings and guide remediation.
• Develop automated dashboards and reports on vulnerability exposure, scan coverage, remediation progress, aging, and SLA adherence using native tools and Excel.
• Mentor junior analysts and establish standards for triage and reporting; act as escalation point for complex findings.
• Provide recommendations on secure configurations, system hardening, and overall vulnerability management maturity.

Skills

Vulnerability management

Exposure management

Security operations

Leadership

Communication

English proficiency

Scripting

Tools

Qualys VMDR

Wiz

Tanium

Job description

Bain & Company is seeking a Security Operations professional to lead vulnerability and exposure management within its Cyber Operations team. The role involves hands-on operation of Qualys VMDR, Wiz, and Tanium, plus driving remediation standards and SLA governance in a large-scale multi-cloud environment.

Based in the Boston area with a hybrid in-office model, you will mentor junior analysts, align with IT and infrastructure teams, and communicate risk to senior leadership.