Senior Director – Security Posture & Exposure Management

This is a fully remote position, open to applicants in United States.

📋 Description

• Establish and take ownership of the technical strategy, architecture, operating model, roadmap, and outcomes for comprehensive enterprise vulnerability management.

• Lead, develop, and ensure accountability among leaders and teams within vulnerability management, application security, offensive security, advanced discovery, validation and prioritization, and exposure reporting.

• Direct the technical course of the enterprise scanning environment, encompassing coverage architecture, scan health, authenticated and agent-based scanning, asset reconciliation, tooling selection, and integrations.

• Act as the senior technical escalation point for contested findings, severity assessments, exploitability concerns, false positives, and exceptions.

• Create risk-based prioritization criteria utilizing severity, exploitability, threat intelligence, asset criticality, and exposure context.

• Define and uphold remediation SLAs, as well as exception and escalation procedures, alongside accountability frameworks.

• Supervise the application security initiative and incorporate its insights into enterprise prioritization, SLAs, and burndown reporting.

• Manage offensive security and advanced vulnerability discovery, including scoping, rules of engagement, and systemic remediation efforts.

• Take charge of exposure reporting and burndown processes, including executive reporting, technology-owner scorecards, trend analysis, data pipelines, and metrics.

• Document mitigations and oversee risk acceptance when residual exposure cannot be fully mitigated.

• Collaborate with Security Operations, Incident Response, and threat intelligence teams regarding actively exploited vulnerabilities.

• Oversee budgeting, vendor relationships, staffing, contract resources, and offshore teams.

⛳️ Requirements

• Proven experience in enterprise vulnerability management and security practices.

• Strong leadership skills with the ability to manage and influence cross-functional teams.

• In-depth knowledge of vulnerability assessment tools and techniques.

• Excellent problem-solving skills and the ability to navigate complex technical issues.

• Strong communication skills, capable of articulating technical concepts to non-technical stakeholders.

🏝️ Benefits

• Company bonus based on both company and individual performance.

• Company-sponsored 401(k) plan.

• Pension plan.

• Vacation benefits.

• Medical, dental, vision, and prescription drug coverage.

• Flexible spending accounts for healthcare and/or dependent day care.

• Life insurance and death benefits.

• Time off and leave of absence benefits.

• Employee assistance program.

• Fitness benefits.

• Employee clubs and activities.