ZipRecruiter

Log In

1

Vulnerability Manager Jobs (NOW HIRING)

Truist

Head of Vulnerability Management

Lakeway, TX · On-site

Align vulnerability management processes with FFIEC, OCC, GLBA, NIST, SOX, and PCI-DSS regulatory requirements. Collaborate with risk management, audit, and compliance teams to ensure regulatory ...

Lancesoft

Vulnerability Management Engineer

New York, NY · On-site

$60 - $62/hr

The Vulnerability Management and Configuration Assurance (VMCA) Engineer plays a critical role in strengthening the organization's security posture by designing, implementing, and optimizing ...

Corporate Services

Sr. Vulnerability Analyst

Detroit, MI

$95K - $124K/yr

Senior Vulnerability Analyst is a key role in advancing vulnerability management throughout the HFHS enterprise through technical expertise with a focus on threat intelligence, vulnerability ...

Truist

Head of Vulnerability Management

Lakeway, TX · On-site

Align vulnerability management processes with FFIEC, OCC, GLBA, NIST, SOX, and PCI-DSS regulatory requirements. Collaborate with risk management, audit, and compliance teams to ensure regulatory ...

RennerBrown Staffing

Be Seen First

Cyber Security Engineer - Vulnerability Management

New York, NY · On-site

$165K - $175K/yr

Senior Cybersecurity Engineer - Vulnerability Management & Incident Response Position Overview Our client is seeking a highly technical Cybersecurity Engineer to lead and mature enterprise ...

nLeague

Vulnerability Management Engineer

Atlanta, GA · On-site

Vulnerability Management Engineer Client: ATL - AIM General Location: 55 Trinity Avenue, Suite G700 ... Qualys, Defender, Azure Update Manager, PatchMyPC, etc.). · Ability to analyze scan output ...

next page

Showing results 1-20

All JobsVulnerability Manager Jobs

Vulnerability Manager information

See salary details

$9

$21

$54

How much do vulnerability manager jobs pay per hour?

As of Jun 25, 2026, the average hourly pay for vulnerability manager in the United States is $21.89, according to ZipRecruiter salary data. Most workers in this role earn between $17.31 and $21.15 per hour, depending on experience, location, and employer.

What are the key skills and qualifications needed to thrive as a Vulnerability Manager, and why are they important?

To thrive as a Vulnerability Manager, you need expertise in risk assessment, vulnerability scanning, and cybersecurity fundamentals, typically supported by a degree in information security or a related field. Familiarity with tools like Nessus, Qualys, and vulnerability management platforms, as well as certifications such as CISSP or CEH, is often required. Strong analytical skills, attention to detail, and clear communication are crucial soft skills for effectively identifying issues and coordinating remediation efforts. These abilities ensure that organizations can proactively manage security risks and maintain robust defense against cyber threats.

What is the difference between Vulnerability Manager vs Security Analyst?

AspectVulnerability ManagerSecurity Analyst
CertificationsCertified Vulnerability Assessor (CVA), CISSP, CEHCISSP, Security+, CEH
Work EnvironmentOversees vulnerability assessments, manages teams, develops strategiesMonitors security systems, analyzes threats, responds to incidents
Employer & Industry UsageUsed in cybersecurity teams across industries to manage vulnerabilitiesCommonly employed in security operations centers (SOCs) to analyze threats

While both roles focus on cybersecurity, Vulnerability Managers primarily oversee vulnerability assessments and strategy, whereas Security Analysts focus on monitoring and incident response. Both roles require relevant certifications and work within cybersecurity teams, but their daily responsibilities and focus areas differ.

What does a Vulnerability Manager do?

A Vulnerability Manager is responsible for identifying, assessing, and mitigating security vulnerabilities within an organization's systems, networks, and applications. They oversee vulnerability scanning, analyze the results, prioritize risks, and work with various teams to implement remediation strategies. Their goal is to reduce the organization's exposure to cyber threats by ensuring that security weaknesses are addressed promptly and effectively.

What are some common challenges faced by Vulnerability Managers when prioritizing remediation efforts?

Vulnerability Managers often encounter challenges in balancing limited resources with a high volume of identified vulnerabilities. Prioritizing remediation efforts requires close collaboration with IT, development, and business teams to assess the potential impact and exploitability of each vulnerability. Additionally, they must stay updated on emerging threats, ensure compliance with industry standards, and communicate risk effectively to both technical and non-technical stakeholders. Navigating these complexities is essential for maintaining a strong security posture while minimizing disruption to business operations.
More about Vulnerability Manager jobs
What cities are hiring for Vulnerability Manager jobs? Cities with the most Vulnerability Manager job openings:
What states have the most Vulnerability Manager jobs? States with the most job openings for Vulnerability Manager jobs include:
Vulnerability Manager jobs near you
Infographic showing various Vulnerability Manager job openings in the United States as of June 2026, with employment types broken down into 50% Full Time, and 50% Contract. Highlights an 84% Physical, 2% Hybrid, and 14% Remote job distribution, with an average salary of $45,538 per year, or $21.9 per hour.

Vulnerability Management Specialist

Core Specialty

Dallas, TX • Hybrid

Full-time

Medical, Dental, Vision, Life, Retirement

Posted 29 days ago

Job description

-

The Vulnerability Management Specialist is a hands-on individual contributor responsible for executing Core Specialty's vulnerability management program across endpoints, servers, cloud resources, and applications. This role focuses on continuous vulnerability scanning, risk analysis, remediation coordination, and reporting, working closely with IT, Infrastructure, Endpoint, and Threat teams.

The ideal candidate is highly analytical, detail-oriented, and comfortable operating in a metrics-driven, SLA-based environment, with the ability to translate technical findings into actionable remediation guidance.

The selected candidate will be required to work a hybrid schedule (3 days in office/2 remote) out of our Dallas, TX, or Cincinnati, OH office. No relocation assistance is being offered with this role.

Key Accountabilities/Deliverables:

  • Conduct continuous vulnerability scanning across enterprise assets using Qualys and related tools.

  • Analyze scan results to validate findings, remove false positives, and assess exploitability.

  • Prioritize vulnerabilities using CVSS, Qualys Detection Score (QDS), asset criticality, and business impact.

  • Enforce remediation SLAs aligned to severity levels: Critical: 7 days, High: 30 days, Medium: 60 days, Low: 180 days.

  • Partner with Infrastructure, EUC, Cloud, and Application teams to drive timely remediation.

  • Support remediation activities using Qualys, Intune, JAMF, PolicyPak, and Microsoft Defender.

  • Ensure vulnerability management activities aligned with NIST, CIS Controls, ISO 27001, and insurance regulatory expectations.

  • Partner with Threat Intelligence and SOC teams to assess vulnerability exposure related to active threats.

  • Develop scripts (PowerShell) and workflows to support remediation, reporting, and validation.


Technical Knowledge and Understanding:

  • Strong understanding of: CVSS scoring and risk prioritization, patch management and remediation workflows, endpoint, server, and cloud security fundamentals.

  • Ability to analyze technical findings and communicate risk clearly to non-security teams.

  • Strong documentation and organizational skills.


Experience required:

  • 4+ years of experience in vulnerability management, security engineering, or threat operations.

  • Hands-on experience with vulnerability scanning platforms (Qualys preferred; Tenable/Rapid7 acceptable).

  • Experience working with Intune, JAMF, or similar endpoint management tools.


Certifications (Preferred):

  • CompTIA Security+

  • Qualys Vulnerability Management certifications

  • GIAC certifications (e.g., GSEC, GCIH)

  • CISSP (or progress toward certification)


Applicants must be authorized to work for any employer in the U.S. We are unable to sponsor or take over sponsorship of an employment Visa for this position.
#LI-Hybrid

-

At Core Specialty, you will receive a competitive salary and opportunities for professional development and advancement. We offer medical, dental, vision, and life insurances; short and long-term disability; a Company-match of 100% of a 6% contribution 401(k) plan; an Employee Assistance Plan; Health Savings Account, Flexible Spending Account, Health Reimbursement Account, and a wellness program

Apply