Vulnerability Manager

Green Key Resources; New York (NY); On-site; USD 110,000 - 170,000; Full time

Job summary

Green Key Resources seeks an experienced enterprise vulnerability management lead to own end-to-end program responsibilities, from identification and risk-based prioritization to remediation and reporting.

You will drive patching across endpoints, servers, and cloud, coordinate emergency fixes for critical exposures, and report on program KPIs and risk exposure to technical and executive audiences. Bachelor\'s in IT/CS and 3–5 years\' relevant experience preferred.

Qualifications

• 3–5 years in vulnerability/patch management or infrastructure security at medium to large enterprises.
• Hands-on experience with Tenable, Qualys or Rapid7 and familiarity with WSUS, SCCM or Intune.
• Knowledge of NIST CSF or ISO 27001.

Responsibilities

• Lead vulnerability assessment, prioritization, and remediation tracking across enterprise systems
• Drive risk-based remediation decisions using CVSS, EPSS, CISA KEV, and threat intel
• Own patching schedules, rollout plans, and maintenance windows
• Coordinate patch deployment, enforce SLAs, manage risk-accepted exceptions
• Lead emergency/out-of-band patching for critical exposures
• Report on vulnerability trends and program KPIs to leadership

Skills

Vulnerability management

Patch management

Risk assessment

Reporting to leadership

Education

Bachelor's in IT/CS or related field

Tools

Tenable

Qualys

Rapid7

WSUS

SCCM

Intune

Job description

Own the enterprise vulnerability management program end-to-end - from identification and risk-based prioritization to remediation and reporting. You'll evaluate criticality using CVSS/EPSS/CISA KEV, run patch and remediation schedules across endpoints, servers, and cloud, lead emergency patching for critical/actively exploited vulns, and report on program KPIs and risk exposure to technical and executive audiences.

What you'll do:

• Lead vulnerability assessment, prioritization, and remediation tracking across enterprise systems
• Drive risk-based remediation decisions using CVSS, EPSS, CISA KEV, and threat intel
• Own patching schedules, rollout plans, and maintenance windows
• Coordinate patch deployment, enforce SLAs, manage risk-accepted exceptions
• Lead emergency/out-of-band patching for critical exposures
• Report on vulnerability trends and program KPIs to leadership

What you bring:

• Bachelor's in IT, CS, or related field (or equivalent experience)
• 3-5 years in vulnerability/patch management or infrastructure security at medium-large enterprises
• Hands-on with Tenable, Qualys, or Rapid7; familiarity with WSUS, SCCM, or Intune
• Knowledge of NIST CSF or ISO 27001
• Ability to obtain/maintain Secret clearance; U.S. citizenship required