About this role
Accountabilities
You will lead client engagements and contribute to the development of security solutions that strengthen exposure management, improve vulnerability remediation, and support long-term risk reduction. Your responsibilities will include:
- Lead assessments of CTEM and vulnerability management programs, evaluating asset discovery and inventory, exposure identification, vulnerability scanning, risk-based prioritization, remediation workflows, and validation practices.
- Collect and analyze evidence related to program maturity, technology configurations, asset coverage, scanning practices, remediation processes, exception handling, reporting, and governance.
- Document assessment findings and develop clear, detailed observations and practical recommendations based on the risks affecting client environments.
- Create actionable remediation strategies and roadmaps that consider exposure severity, exploitability, business criticality, asset context, and operational dependencies.
- Advise clients on improving attack surface visibility, prioritizing exposures, and coordinating remediation across infrastructure, cloud, application, and security teams.
- Support the design and implementation of vulnerability and exposure management processes, including roles, ownership, service levels, metrics, and reporting structures.
- Evaluate security tools and integrations that enable asset discovery, vulnerability assessment, exposure prioritization, remediation tracking, and validation.
- Conduct technical analysis of client environments and dependencies to inform risk prioritization, remediation sequencing, and implementation planning.
- Develop CTEM strategies, vulnerability management plans, procedures, runbooks, and playbooks.
- Facilitate strategy, roadmap, design, and planning workshops for small and medium-sized engagements, ensuring discussions are grounded in architectural principles, security patterns, and measurable outcomes.
- Manage client expectations, project objectives, requirements, milestones, dependencies, status updates, and timelines to support successful delivery.
- Lead or contribute to secure solution architecture and design discussions, developing technology architectures and operating models aligned with client security objectives.
- Prepare, review, finalize, and present project deliverables, including recommendations and findings for executive stakeholders.
- Support business development through client discovery meetings, engagement scoping, proposal development, and sales presentations.
- Provide consultative expertise during sales opportunities, particularly around secure architecture, CTEM, vulnerability management strategies, and solution feasibility.
- Contribute to the continuous improvement and standardization of security services, architectural approaches, and delivery methodologies.
- Maintain expertise across multiple security domains or solutions, share industry knowledge, and mentor junior consultants and peers.
- Provide technical leadership and guidance to project teams, supporting collaboration and professional development throughout engagements.
Requirements
The ideal candidate brings extensive cybersecurity consulting experience, strong technical knowledge, and the ability to lead client-facing engagements in complex enterprise environments. You should be comfortable translating technical findings into business-oriented recommendations while guiding teams toward practical security outcomes. Key qualifications include:
- At least 10 years of relevant professional experience, including experience leading technical initiatives or client engagements.
- Demonstrated consulting experience in secure architecture, vulnerability management, Continuous Threat Exposure Management (CTEM), or related security program design.
- Strong understanding of exposure management practices, vulnerability assessment, risk prioritization, remediation strategies, and enterprise security environments.
- Experience leading multidisciplinary teams and managing multiple client projects or engagements.
- Ability to develop detailed technical documentation, security assessments, architectural recommendations, and program roadmaps.
- Strong knowledge of security technologies, architectures, and industry practices relevant to enterprise cybersecurity.
- Three professional and/or technical certifications, including industry-recognized credentials aligned with security services.
- An undergraduate degree in Engineering, Computer Science, IT Management, Cybersecurity, or a related technical field is preferred but not required.
- Excellent written and verbal communication skills, including strong proficiency with Microsoft Office.
- Confidence presenting technical findings and recommendations to diverse audiences in virtual and in-person settings.
- Strong analytical and problem-solving abilities, with the capacity to address complex and abstract challenges.
- Excellent interpersonal skills, active listening, and the ability to build productive relationships with different personalities and stakeholders.
- A collaborative and resourceful approach, with a commitment to mentoring colleagues and contributing to team development.
Benefits
- Annual on-target earnings (OTE) of $170,000–$180,000 USD , including base salary and any applicable target bonus.
- Compensation may vary depending on relevant experience, qualifications, and geographic location.
- Medical, dental, and vision insurance.
- 401(k) retirement plan.
- Paid company holidays.
- Paid time off.
- Paid parental and caregiver leave.
- Access to professional development opportunities, including cross-department training.
- Support for industry certifications and professional credentials.
- Access to advanced technology resources and a multi-million-dollar technology lab.
- Inclusive workplace culture that values diverse perspectives, experiences, and contributions.
How Jobgether works:
We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.
We appreciate your interest and wish you the best!
Why Apply Through Jobgether?
Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.
#LI-CL1