Manager, Vulnerability Management

Leads and matures Delinea's product vulnerability management function, reporting directly to the CISO. The programme covers every Delinea product and service, and the manager builds its team, culture and operating model while partnering with Product Security and Product Development to keep security close to developers without slowing them.

The role runs the product security scanning tools, including SAST, SCA, DAST and CSPM, along with the vulnerability disclosure programme and the process for answering security questions from customers and researchers. It enforces vulnerability management processes and SLAs, defines and reports metrics, and plans and resources vulnerability initiatives so they land on time and on budget. The manager is the main contact for outside product security inquiries, presents the programme's status to executives and auditors, and joins customer calls and contract reviews where product security comes up.

Delinea wants eight or more years in product, application and vulnerability management, ideally with three leading product security or vulnerability management, and experience establishing and running a vulnerability management programme. A bachelor's degree in computer science, information security or a related field is required, with a master's preferred. Knowledge of NIST, ISO 27001, FedRAMP and Common Criteria, certifications such as CISSP or CSSLP, and a software background are welcome. Visa sponsorship is not available. The role is fully remote in the US with under 10% travel.