ZipRecruiter

Log In

1

Vulnerability Manager Jobs in Alabama (NOW HIRING)

PingWind

Cybersecurity Lead

Huntsville, AL

Senior cybersecurity experience leading RMF, assessment and authorization, security engineering, vulnerability management, security documentation, and remediation activities for DoD/Army information ...

PingWind

Cybersecurity Lead

Huntsville, AL

Senior cybersecurity experience leading RMF, assessment and authorization, security engineering, vulnerability management, security documentation, and remediation activities for DoD/Army information ...

PingWind

Cybersecurity Lead

Huntsville, AL · On-site

Senior cybersecurity experience leading RMF, assessment and authorization, security engineering, vulnerability management, security documentation, and remediation activities for DoD/Army information ...

Troy University

Senior Security Analyst

Troy, AL · On-site

$90K - $117K/yr

... vulnerability management, intrusion detection and prevention, threat hunting, security operations, security policy, and awareness/education; oversight of information security incident response ...

previous pagenext page

Showing results 21-40

All JobsVulnerability JobsVulnerability Manager JobsVulnerability Manager Jobs in Alabama

Vulnerability Manager information

See Alabama salary details

$8

$19

$49

How much do vulnerability manager jobs pay per hour?

As of Aug 19, 2026, the average hourly pay for vulnerability manager in Alabama is $19.84, according to ZipRecruiter salary data. Most workers in this role earn between $15.67 and $19.18 per hour, depending on experience, location, and employer.

What does a vulnerability manager do?

A Vulnerability Manager is responsible for identifying, assessing, and mitigating security vulnerabilities within an organization's systems, networks, and applications. They oversee vulnerability scanning, analyze the results, prioritize risks, and work with various teams to implement remediation strategies. Their goal is to reduce the organization's exposure to cyber threats by ensuring that security weaknesses are addressed promptly and effectively.

What are the key skills and qualifications needed to thrive as a vulnerability manager, and why are they important?

To thrive as a Vulnerability Manager, you need expertise in risk assessment, vulnerability scanning, and cybersecurity fundamentals, typically supported by a degree in information security or a related field. Familiarity with tools like Nessus, Qualys, and vulnerability management platforms, as well as certifications such as CISSP or CEH, is often required. Strong analytical skills, attention to detail, and clear communication are crucial soft skills for effectively identifying issues and coordinating remediation efforts. These abilities ensure that organizations can proactively manage security risks and maintain robust defense against cyber threats.

What are some common challenges faced by vulnerability managers when prioritizing remediation efforts?

Vulnerability Managers often encounter challenges in balancing limited resources with a high volume of identified vulnerabilities. Prioritizing remediation efforts requires close collaboration with IT, development, and business teams to assess the potential impact and exploitability of each vulnerability. Additionally, they must stay updated on emerging threats, ensure compliance with industry standards, and communicate risk effectively to both technical and non-technical stakeholders. Navigating these complexities is essential for maintaining a strong security posture while minimizing disruption to business operations.

What is the difference between Vulnerability Manager vs Security Analyst?

AspectVulnerability ManagerSecurity Analyst
CertificationsCertified Vulnerability Assessor (CVA), CISSP, CEHCISSP, Security+, CEH
Work EnvironmentOversees vulnerability assessments, manages teams, develops strategiesMonitors security systems, analyzes threats, responds to incidents
Employer & Industry UsageUsed in cybersecurity teams across industries to manage vulnerabilitiesCommonly employed in security operations centers (SOCs) to analyze threats

While both roles focus on cybersecurity, Vulnerability Managers primarily oversee vulnerability assessments and strategy, whereas Security Analysts focus on monitoring and incident response. Both roles require relevant certifications and work within cybersecurity teams, but their daily responsibilities and focus areas differ.

What cities in Alabama are hiring for Vulnerability Manager jobs?

Cities in Alabama with the most Vulnerability Manager job openings:

Vulnerability Manager jobs near you
Infographic showing various Vulnerability Manager job openings in Alabama as of August 2026, with employment types broken down into 84% Full Time, 12% Part Time, and 4% Contract. Highlights an 81% Physical, 2% Hybrid, and 17% Remote job distribution, with an average salary of $41,275 per year, or $19.8 per hour.

Information Assurance II (Vulnerability Assessment/ACAS Security Manager)

DLS Engineering

Montgomery, AL • On-site

$75K - $78K/yr

Full-time

Medical, Dental, Vision, Life, Retirement, PTO

Re-posted 5 days ago

Job description

About DLS Engineering
DLS is an engineering firm with 30 years of Federal Government contracting experience. Our small business efficiencies coupled with a commitment to excellence allow us to provide reliable solutions with integrity for our nation's most critical defense and national security priorities.
Position overview:
DLS Engineering is seeking a Information Assurance II (Vulnerability Assessment/ACAS Security Manager) professional for a full-time position in support of the Air Force Intranet Control (AFINC) program at Gunter Annex in Montgomery, Alabama. This is an on-site position.
As part of AFINC, the mission of the 26th Network Operations Squadron (26 NOS) is to provide mission assurance to the warfighter through the operation, management, and defense of the Department of Defense Information Network (DODIN). In the execution of its mission, the 26 NOS maintains network infrastructure, to include routers, switches, proxies, firewalls, servers, workstations, printers, Storage Area Networks (SAN) and test labs, to provide maneuverability and defense of both classified and unclassified networks.
A day in the life:
  • Measures effectiveness of defense-in- depth architecture against known vulnerabilities using available tools within organization to find them.
  • Analyze, prioritize, and mitigate vulnerabilities to lower or eliminate risk.
  • Create reports to effectively communicate to government problems and proposed solutions.
  • Actively manage (inventory, track, and request corrective action) all hardware devices on network that only authorized devices is given access and unauthorized and unmanaged devices are found and prevented from gaining access.
  • Conduct/review/validate vulnerability scans. Perform vulnerability scans to include analysis of results, identification of false positives, exceptions, and subsequent POA&Ms and/or MFRs creation, monitoring and reporting to include POA&M status and contributions to Monthly and Quarterly reports.
  • Collects and reviews data gathered from a variety of tools (including intrusion detection system alerts, firewall, network traffic logs, and host system logs) to analyze events for possible attacks that occur within the environment. The environments can be computing, network, or enclave.
  • Validates, investigates, and analyzes all response activities related to cyber incidents. These tasks include, but are not limited to: creating and maintaining incident tracking information; planning, coordinating, and directing recovery activities; and incident tracking information; and incidents analysis tasks, including examining all available information and supporting evidence of artifacts related to an incident or event.

When I read the below it sounds like me:
  • 3+ years of experience in utilizing security relevant tools to include: NESSUS, ACAS, DISA STIGs, Audit Tools, Forescout, ESS, Performs assessments of system and network and identifies where the system/network deviate from acceptable configurations, DoW policy, or local policy/guidelines
  • IAT-II certification (required)
  • Active Secret clearance (required)

Other information:
  • We offer a competitive salary and a 401k program with company match.
  • We offer a comprehensive benefits package including health, vision, dental, life, and disability insurance.
  • We offer a generous paid time off package
  • If accommodation is needed with the application and / or the interview process for applicants with disabilities, please contact Human Resources at 757-494-5151.
  • DLS is an E-Verify company.
  • DLS is an equal employment opportunity employer. Qualified applicants will receive consideration without regard to age, race, religion, sex (pregnancy, sexual orientation, gender identity), national origin, or disability. We encourage all qualified applicants to apply. If you believe you have been discriminated against, please contact Barbara Ellison. You also have the right to file a charge of discrimination with the equal employment opportunity commission.
  • Must be able pass a government background check, which will be completed before employment.

The pay range for this role is:
75,000 - 78,000 USD per year (Montgomery, AL)

Apply