Vulnerability Management Supervisor

Westinghouse Electric Company; Cranberry Township (Butler County); Hybrid; USD 117,000 - 146,000; Full time

Benefits offered by this job

Health Insurance

401(k) Match

Paid Time Off

Flexible Work

Educational Reimbursement

Job summary

Westinghouse Electric Company in Cranberry Township, PA, seeks a Vulnerability Management Supervisor to lead the enterprise vulnerability management program and to hands-on perform scanning and remediation when needed.

You will report to the Director, Cybersecurity Operations, managing staff, prioritizing risks, coordinating with infrastructure, applications, cloud, and security engineering teams, and guiding remediation activities.

Qualifications

• Bachelor's degree in Cybersecurity, Information Security, Information Technology, Computer Science, or a related technical discipline, or equivalent professional experience.
• 5+ years of progressive experience in cybersecurity, vulnerability management, security operations, infrastructure security, or a related field, including 1+ years of team leadership, work coordination, or supervisory experience.
• Knowledge of enterprise vulnerability management lifecycle practices, including asset discovery, authenticated scanning, validation, prioritization, remediation tracking, exception handling, and closure verification. Demonstrated hands‑on experience configuring and operating vulnerability assessment platforms, executing authenticated and unauthenticated scans, validating findings, analyzing results, troubleshooting scan issues, and communicating remediation guidance; Rapid7 InsightVM and ServiceNow experience is beneficial.
• Ability to analyze and communicate technical risk using CVSS, threat and exploit intelligence, asset context, business impact, and compensating controls rather than severity alone.
• Working knowledge of Windows, Linux, networking, databases, web applications, cloud environments, identity technologies, common application vulnerabilities, and enterprise security architecture.
• Knowledge of relevant cybersecurity frameworks and guidance, including NIST CSF, the NIST NICE Framework, CIS Controls and Benchmarks, and applicable regulatory or contractual requirements.
• Experience coordinating penetration tests, vulnerability assessments, and remediation activities across our teams and third‑party service providers.
• Demonstrated people leadership, coaching, workload prioritization, process improvement and delivery management skills.

Responsibilities

• Lead daily vulnerability management operations, including work intake, assignment, prioritization, quality review, service delivery, and staff development.
• Direct risk‑based analysis and prioritization of vulnerabilities using technical severity, exploitability, threat intelligence, asset criticality, business impact, exposure, and available compensating controls.
• Coordinate remediation and mitigation activities with infrastructure, application, cloud, security engineering, project, and business teams; track actions, exceptions, dependencies, and validation through approved IT service management and risk processes.
• Manage vulnerability management platforms, integrations, operating procedures, scan configurations, reporting workflows, service‑provider activities, and lifecycle improvements to support accurate, scalable, and secure operations.
• Lead vulnerability metrics, and partner communications, including new and high‑risk vulnerability briefings, remediation status, scanning coverage, obsolete technology exposure, exception health, and program performance.
• Coordinate annual and on‑demand penetration testing and security assessments. Support projects, vendors, suppliers, and locations. Partner with incident response and other cybersecurity teams on urgent threats.

Skills

Cybersecurity expertise

Team leadership

Risk analysis

Vulnerability management

Threat intelligence

Communication

Project coordination

Cloud environments

Education

Bachelor's degree in Cybersecurity or related field

Tools

Rapid7 InsightVM

ServiceNow

Job description

Are you interested in being part of an innovative team that supports Westinghouse's mission to provide clean energy solutions? At Westinghouse, we recognize that our employees are our most valuable asset and we seek to identify, attract and recruit the most qualified talent while recognizing and encouraging the value of diversity in the global workplace.

As a Vulnerability Management Supervisor, you will lead the daily delivery and continuous improvement of the enterprise vulnerability management program under the direction of the Director, Cybersecurity Operations. This is a hands‑on supervisory role that leads vulnerability management personnel while remaining able to directly perform vulnerability scanning, validating findings, analyzing risk, and supporting remediation when operational needs require.

You will report to the Director, Cybersecurity Operations and be located at Cranberry Township, PA. This is a hybrid work schedule.

Key Responsibilities:

• Lead daily vulnerability management operations, including work intake, assignment, prioritization, quality review, service delivery, and staff development.
• Direct risk‑based analysis and prioritization of vulnerabilities using technical severity, exploitability, threat intelligence, asset criticality, business impact, exposure, and available compensating controls.
• Coordinate remediation and mitigation activities with infrastructure, application, cloud, security engineering, project, and business teams; track actions, exceptions, dependencies, and validation through approved IT service management and risk processes.
• Manage vulnerability management platforms, integrations, operating procedures, scan configurations, reporting workflows, service‑provider activities, and lifecycle improvements to support accurate, scalable, and secure operations.
• Lead vulnerability metrics, and partner communications, including new and high‑risk vulnerability briefings, remediation status, scanning coverage, obsolete technology exposure, exception health, and program performance.
• Coordinate annual and on‑demand penetration testing and security assessments. Support projects, vendors, suppliers, and locations. Partner with incident response and other cybersecurity teams on urgent threats.

Qualifications:

• Bachelor's degree in Cybersecurity, Information Security, Information Technology, Computer Science, or a related technical discipline, or equivalent professional experience.
• 5+ years of progressive experience in cybersecurity, vulnerability management, security operations, infrastructure security, or a related field, including 1+ years of team leadership, work coordination, or supervisory experience.
• Knowledge of enterprise vulnerability management lifecycle practices, including asset discovery, authenticated scanning, validation, prioritization, remediation tracking, exception handling, and closure verification.* Demonstrated hands‑on experience configuring and operating vulnerability assessment platforms, executing authenticated and unauthenticated scans, validating findings, analyzing results, troubleshooting scan issues, and communicating remediation guidance; Rapid7 InsightVM and ServiceNow experience is beneficial.* Ability to analyze and communicate technical risk using CVSS, threat and exploit intelligence, asset context, business impact, and compensating controls rather than severity alone.* Working knowledge of Windows, Linux, networking, databases, web applications, cloud environments, identity technologies, common application vulnerabilities, and enterprise security architecture.* Knowledge of relevant cybersecurity frameworks and guidance, including NIST CSF, the NIST NICE Framework, CIS Controls and Benchmarks, and applicable regulatory or contractual requirements.* Experience coordinating penetration tests, vulnerability assessments, and remediation activities across our teams and third‑party service providers.* Demonstrated people leadership, coaching, workload prioritization, process improvement and delivery management skills.

We are committed to transparency and equity in all of our people practices. The base salary range for this position, which is dependent upon experience, qualifications and skills, is estimated to be $116,800 to $146,000 per year.

#LI-Hybrid

Why Westinghouse?

Our benefits package is tailored to meet the diverse needs of our employees, while also promoting wellness and career growth. The following are representative of what we offer.

• Comprehensive Medical benefits which could include medical, dental, vision, prescription coverage and Health Savings Account (HSA) with employer contributions options
• Wellness Programs designed to support employees in maintaining their health and well‑being including Employee Assistance Program providing support for our employees and their household members
• 401(k) with Company Match Contributions to support employees' retirement
• Paid Vacations and Company Holidays
• Opportunities for Flexible Work Arrangements to promote work‑life balance
• Educational Reimbursement and Comprehensive Career Programs to help employees grow in their careers
• Global Recognition and Service Programs to celebrate employee accomplishments and service
• Employee Referral Program

Westinghouse Electric Company is the global nuclear energy industry's first choice for safe, clean, and efficient energy solutions. We enable our delivery of this vision by living our value system:

• Safety and Quality
• Integrity and Trust
• Customer Focus and Innovation
• Speed and Passion to Win
• Teamwork and Accountability

While our Global Headquarters are located in Cranberry Township, PA, we have over 11,000 employees working at locations in 19 different countries. You can learn more by visiting http://www.westinghousenuclear.com.

Westinghouse is an Equal Opportunity Employer including Veterans and Individuals with Disabilities

Get connected with Westinghouse on social media: Twitter | Facebook | LinkedIn | YouTube