Vulnerability Manager

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Vulnerability Manager based in United States.

This role owns the vulnerability management program end to end, from intake and risk assessment through remediation, reporting, and closure verification.
You will operate the program as a hands-on security leader, designing processes, driving automation, and maintaining an authoritative view of vulnerability risk across the product portfolio.
A key focus will be supporting FedRAMP 20x requirements and establishing vulnerability management capabilities for new products and services as they launch.
You will work closely with Security Engineering and product engineering teams to integrate scanning, asset inventory, ticketing, dashboards, and other security capabilities.
The role requires strong risk judgment, balancing exploitability, exposure, asset criticality, and compensating controls rather than relying solely on vulnerability scores.
You will also lead rapid response to actively exploited and zero-day vulnerabilities while communicating risk clearly to engineers, executives, auditors, and other stakeholders.
This is a fully remote, North America-based position suited to someone who combines security expertise, operational ownership, automation, and strong cross-functional influence.