ZipRecruiter

Log In

1

Director Vulnerability Management Jobs (NOW HIRING)

Ntiva

Vulnerability Management Analyst

Mclean, VA · On-site +1

How you'll make an Impact As a Vulnerability Management Analyst, you support Security Engineers by ... Policy deployment and updates as directed * Review and triage of web filtering alerts for ...

Ntiva

Vulnerability Management Analyst

Mclean, VA · On-site +1

How you'll make an Impact As a Vulnerability Management Analyst, you support Security Engineers by ... Policy deployment and updates as directed * Review and triage of web filtering alerts for ...

Corporate Services

Sr. Vulnerability Analyst

Detroit, MI · On-site

$95K - $124K/yr

Senior Vulnerability Analyst is a key role in advancing vulnerability management throughout the ... of direct information security experience, and a minimum of one (1) year experience directly ...

Corporate Services

Sr. Vulnerability Analyst

Detroit, MI · On-site

$95K - $124K/yr

Senior Vulnerability Analyst is a key role in advancing vulnerability management throughout the ... of direct information security experience, and a minimum of one (1) year experience directly ...

Coalfire

Vulnerability Analyst

Direct experience supporting vulnerability management in at least two of the following cloud providers: AWS, Azure, GCP * Background working within at least one compliance framework (for example ...

next page

Showing results 1-20

All JobsDirector Vulnerability Management Jobs

Director Vulnerability Management information

What are some common challenges faced by a Director of Vulnerability Management, and how can they be addressed?

A Director of Vulnerability Management often encounters challenges such as prioritizing remediation efforts among numerous vulnerabilities, coordinating across multiple teams, and keeping up with rapidly evolving threat landscapes. Addressing these challenges requires strong communication skills to align IT, security, and business stakeholders, as well as implementing effective vulnerability assessment tools and processes. Building a culture of continuous improvement and staying updated with the latest cybersecurity trends can also help in proactively managing and mitigating risks.

Can I make $200,000 a year in cyber security?

A Director of Vulnerability Management can potentially earn $200,000 or more annually, especially with extensive experience, advanced certifications like CISSP, and leadership responsibilities. Salaries vary by industry, location, and company size, but senior cybersecurity roles often reach or exceed this level for experienced professionals.

Can you make $500,000 a year in cyber security?

A Director of Vulnerability Management can potentially earn $500,000 annually, especially with extensive experience, advanced certifications, and working in high-paying industries or organizations. Such salaries often include bonuses, stock options, or other incentives. Achieving this level typically requires a combination of technical expertise, leadership skills, and strategic responsibilities.

What does a Director of Vulnerability Management do?

A Director of Vulnerability Management oversees an organization's efforts to identify, assess, and remediate security vulnerabilities in its systems and networks. This role involves leading a team of security professionals, developing vulnerability management strategies, ensuring compliance with industry standards, and collaborating with IT and business units to mitigate risks. The director also communicates security risks to executive leadership and helps prioritize remediation efforts based on potential business impact.

Who is Trump's director of cyber security?

There is no publicly known position titled 'Director of Cyber Security' specifically associated with Donald Trump. In government, cybersecurity roles are typically held by officials such as the Cybersecurity and Infrastructure Security Agency (CISA) Director or National Cyber Director, but these are not directly linked to Trump personally. The role and leadership in cybersecurity within the government can vary depending on administration and organizational structure.

Is 40 too old for cyber security?

Age is not a barrier to becoming a Director of Vulnerability Management or working in cybersecurity. Many professionals successfully transition into cybersecurity roles at various ages, leveraging skills such as problem-solving, technical knowledge, and certifications like CISSP or CISA. Experience and continuous learning are often more important than age in this field.

What are the key skills and qualifications needed to thrive as a Director of Vulnerability Management, and why are they important?

To thrive as a Director of Vulnerability Management, you need a strong background in cybersecurity, risk assessment, and vulnerability management frameworks, typically supported by a bachelor's degree in information security or related fields and relevant certifications like CISSP or CISM. Familiarity with vulnerability scanning tools (e.g., Qualys, Nessus), SIEM platforms, and patch management systems is essential. Exceptional leadership, communication, and strategic thinking skills help coordinate cross-functional teams and drive remediation efforts. These skills and qualities are crucial for proactively identifying risks, ensuring regulatory compliance, and safeguarding organizational assets from cyber threats.

What is the difference between Director Vulnerability Management vs Security Manager?

AspectDirector Vulnerability ManagementSecurity Manager
Primary FocusOverseeing vulnerability assessment and remediation strategiesManaging overall security policies and team operations
CertificationsCertifications like CISSP, CISA, GIACCertifications like CISSP, CISM, CompTIA Security+
Work EnvironmentSecurity teams, vulnerability scanning tools, incident responseSecurity teams, policy development, risk management
Industry UsageCommon in large enterprises with dedicated vulnerability teamsWidespread across organizations managing overall security

The main difference is that the Director Vulnerability Management focuses specifically on identifying and addressing security vulnerabilities, while the Security Manager oversees broader security policies and team management. Both roles require similar certifications and work in security-focused environments, but their scope and responsibilities differ.

More about Director Vulnerability Management jobs
What cities are hiring for Director Vulnerability Management jobs? Cities with the most Director Vulnerability Management job openings:
What are the most commonly searched types of Vulnerability Management jobs? The most popular types of Vulnerability Management jobs are:
What states have the most Director Vulnerability Management jobs? States with the most job openings for Director Vulnerability Management jobs include:
What job categories do people searching Director Vulnerability Management jobs look for? The top searched job categories for Director Vulnerability Management jobs are:
Director Vulnerability Management jobs near you
Enterprise Vulnerability Management Lead SME

Enterprise Vulnerability Management Lead SME

ECS

Falls Church, VA • On-site

$174K - $189K/yr

Full-time

Posted 12 days ago

Key responsibilities

  • Leads coordinated vulnerability management operations supporting Department of War mission systems across unclassified and classified networks.

  • Directs enterprise vulnerability lifecycle activities including scan result validation, risk triage, remediation coordination, and continuous tracking of findings affecting operating systems, applications, databases, and network devices.

  • Produces vulnerability trend reports, remediation performance metrics, and executive summaries for cybersecurity leadership and Authorizing Officials using ServiceNow, SharePoint, and reporting platforms.

Job description

Everforth ECS is seeking an Enterprise Vulnerability Management Lead SME to work in the National Capital Region covering the Pentagon, Falls Church, and Fairfax.
Salary Range: $174,000 - $189,000
Please Note: This position is contingent upon contract award.
The War Data Platform (WDP) is a key initiative within the U.S. Department of War's (DoW) AI-First strategy introduced in early 2026. The WDP separates business and financial data from operational warfighting data, aiming to accelerate the deployment of artificial intelligence (AI) on the battlefield. The WDP extends to Unclassified, Secret, and Top Secret environments, and supports collaboration between Combatant Commands, Joint Staff directorates, Senior Executive Service leaders, and operational analysts.
The Enterprise Vulnerability Management Lead SME serves as the principal authority for vulnerability lifecycle management across WDP's classified and unclassified enterprise environments, directing end-to-end remediation coordination, POA&M governance, and risk acceptance activities that sustain continuous authorization posture across NIPRNet, SIPRNet, and JWICS . This is a senior subject matter expert role demanding deep expertise in enterprise vulnerability operations, DoW Risk Management Framework execution, and Authorizing Official-level reporting, with direct responsibility for protecting mission-critical AI and data platform capabilities supporting warfighter decision-making at the highest levels of DoW leadership.
• Leads coordinated vulnerability management operations supporting Department of War mission systems across unclassified and classified networks.
• Directs enterprise vulnerability lifecycle activities including scan result validation, risk triage, remediation coordination, and continuous tracking of findings affecting operating systems, applications, databases, and network devices.
• Analyzes vulnerability data generated by ACAS, endpoint security platforms, and cloud security tooling to distinguish true risk conditions from false positives and environmental artifacts.
• Develops prioritized remediation strategies aligned to mission impact, threat severity, and authorization timelines while coordinating corrective actions with system owners, platform engineers, and cybersecurity teams.
• Maintains authoritative vulnerability records and remediation status within POA&M repositories, continuous monitoring dashboards, and authorization artifacts supporting Risk Management Framework execution.
• Supports deviation requests and risk acceptance actions through defensible technical analysis and documented mitigation strategies.
• Produces vulnerability trend reports, remediation performance metrics, and executive summaries for cybersecurity leadership and Authorizing Officials using ServiceNow, SharePoint, and reporting platforms.
• Guides junior analysts through standardized workflows for scan validation, POA&M updates, and stakeholder coordination while maintaining consistency and data integrity.
• Enables sustained authorization posture, reduced exposure windows, and improved cyber hygiene across enterprise environments while reinforcing program values of accountability, operational readiness, transparency, and disciplined risk management.
• Performs other duties as assigned.
• Current Secret security clearance.
• 12+ years of experience in enterprise vulnerability management, cybersecurity operations, or a closely related discipline, with demonstrated senior subject matter expert-level ownership of vulnerability lifecycle operations across complex federal, DoW, or enterprise classified network and cloud environments.
• IAM Level I certification from an approved credential, including CompTIA Security+ CE, ISC² CAP, ISC² SSCP, or GIAC GSLC.
• Demonstrated hands-on expertise directing enterprise-scale vulnerability management programs using ACAS or Nessus, with applied experience managing POA&M portfolios, producing Authorizing Official-level risk reporting, and leading remediation coordination across diverse system owner communities in support of continuous authorization under NIST 800-53 and DoW RMF requirements.
• Proven experience supporting DoW or federal Risk Management Framework processes, including preparation and maintenance of Body-of-Evidence packages, deviation and risk acceptance documentation, and continuous monitoring artifacts in Government-approved systems such as eMASS or Xacta.
• Strong problem-solving and decision-making capabilities, with a proven ability to weigh the relative costs and benefits of potential actions and identify the most appropriate solution.
• Highly developed interpersonal and oral/written communication skills, with the ability to effectively and professionally interact with a diverse set of stakeholders (from peers to end-users to executive management).

Apply