Manager, Vulnerability Management

About the company

The company is the identity security platform that continuously controls what AI agents, humans and machines can do and for how long. It extends privileged access management from the point of access to the moment of action, using just-in-time authorization to reduce standing privilege across on-premises, multi-cloud and short-lived infrastructure, without adding friction for legitimate users. The company provides visibility across every identity type, scores the risk each one carries, and preserves the context behind access decisions, making them auditable and defensible. It supports both static and ephemeral access, letting teams apply Zero Standing Privilege where risk demands it without replacing existing infrastructure.

Summary

The company’s Cybersecurity organization is seeking a highly skilled Manager of Product Vulnerability Management to provide leadership and execution for an industry-leading Vulnerability Management program. This critical role will be responsible for overseeing and maturing the company’s Product Vulnerability Management function and developing best-in-class capabilities to secure the company’s product offerings.

The ideal candidate will be highly collaborative and customer service oriented; driven to make security integration a near-frictionless experience for our developer community. They would have experience in SSDLC, Product or Application Security, and Vulnerability Management.

This is a challenging and impactful role with security responsibilities that span multiple product offerings. You will be directly responsible for delivering a comprehensive Vulnerability Management program that covers all of the company’s products and services.

This role reports directly to the CISO, is based in the US, and is fully remote.

What You'll Do

• Design and execute against a Product Vulnerability Management target operating model (people, process, and technology) that incorporates forward-leading agile best practices.

• Set the tone for the Product Vulnerability Management team culture leveraging best practices in highest performing team building.

• Partner closely with peers in Product Security and Product Development to integrate security while also ensuring developer enablement.

• Direct the analysis, evaluation, and enhancement of the effectiveness of Vulnerability Management postures at procedural and technological levels.

• Use knowledge of current Vulnerability Management best practices and industry trends to lead the implementation of Product and Cloud Security solutions.

• Provide strategic and technical leadership with respect to the development and execution of key Vulnerability Management services to our developer community, including:

o Manage Product Security scanning tools (SAST, SCA, DAST, CSPM, etc.)

o Manage Vulnerability disclosure program

o Manage process for addressing product security inquiries from customers and researchers

o Ensure adherence to vulnerability management processes and SLAs.

o Identity and report on Vulnerability Management metrics

• Oversee the planning, scheduling, and resource allocation for Vulnerability Management initiatives, ensuring projects are completed on time, within scope, and on budget.

• Collaborate with Cybersecurity and other internal teams, including IT, product, and operations, to ensure Vulnerability Management initiatives meet regulatory, industry, and security standards.

• Act as the primary point of contact for all external Product Security-related inquiries, escalating issues as needed to senior leadership and external stakeholders.

• Drive continuous improvement efforts within cybersecurity processes, incorporating best practices and lessons learned.

• Prepare and deliver presentations and reports to executives, stakeholders, and auditors on the status and effectiveness of the Vulnerability Management program.

• Participate in customer-facing calls and review customer contracts to address Product Security-related inquiries.

What You'll Bring

• Up-to-date knowledge of the current Product Security threat landscape and industry best practices.

• Bachelor’s degree in Computer Science, Information Security, Business Administration, or a related field. Master’s degree preferred.

• 8+ years of relevant experience in Product, Application, and Vulnerability Management, with 3 years of Product Security or Vulnerability Management leadership experience preferred.

• Experience with establishing and leading a Vulnerability Management program.

• Experience supporting recruiting, technical interview screening, and team development.

• Ability to innovate and find creative solutions that balance the needs of the business with the needs of security.

• Ability to interact with a broad cross-section of personnel to explain and enforce security measures.

• Effective executive functioning and presentation skills.

• Strong leadership, communication, and interpersonal skills, with the ability to influence stakeholders at all levels of the organization.

• Strong analytical skills with the ability to prioritize, manage competing demands, and meet deadlines.

• Minimal travel (<10%).

We'd Love to See

• Understanding of cybersecurity frameworks, risk management principles, and industry standards (e.g., NIST, ISO 27001, CIS, GDPR, FedRAMP, Common Criteria).

• Cybersecurity certifications (e.g., CISSP, CISM, CSSLP, CCSP, or similar).

• Familiarity with Jira and Confluence.

• Background in Software development.

For this Job, the company is not considering candidates that need any type of US work authorization now or in the future. This includes, but is not limited to: F1-OPT, F1-CPT, H-1B, TN, L-1, J1, etc.

Why work at the company?

• We're passionate problem-solvers helping the world's largest organizations protect what matters most: their human and machine identities.

• We invest in people who are smart, self-motivated, and collaborative.

• What we offer in return is meaningful work, a culture of innovation and great career progression.

At the company, our core values are STRONG and guide our behaviors and success:

• Spirited - We bring energy and passion to everything we do

• Trust - We act with integrity and deliver on our commitments

• Respect - We listen, value different perspectives, and work as one team

• Ownership - We take initiative and follow through

• Nimble - We adapt quickly in a fast-changing environment

• Global - We embrace diverse people and ideas to drive better outcomes

We believe weaving these core values into our day-to-day actions, and our process for hiring, evaluating, and promoting employees, helps us cultivate a work environment that embraces collaboration and camaraderie.

We take care of our employees. We offer competitive salaries, a meaningful bonus program, and excellent benefits, including healthcare insurance, as well as pension/retirement matching, comprehensive life insurance, an employee assistance program, time off plans, and paid company holidays.

The company is an Equal Opportunity and Affirmative Action employer and prohibits discrimination and harassment of any type with regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.

Upon conditional offer of employment, candidates are required to complete comprehensive criminal background check, verification of education, and verification of employment, per employment policy. In addition, all publicly posted social media sites may be reviewed.