Vulnerability Management – CTEM Specialist

This is a fully remote position, open to applicants in United States.

📋 Description

• Spearhead the implementation of a CTEM platform, transitioning from an outdated vulnerability management system.

• Create and configure connectors, scoring/exploitability models, and consolidation logic across various scanners and source systems.

• Ensure the accuracy of data ingestion across vulnerability scanners and source systems.

• Develop SLA and exploitability/risk-scoring frameworks.

• Establish workflows for exception handling and risk acceptance.

• Conduct asset and vulnerability de-duplication and manage inventory reconciliation.

• Set up processes for escalating critical/high-priority vulnerabilities.

• Construct and validate API-based integrations between the CTEM platform and downstream systems like ServiceNow.

• Write Python scripts and automate processes for data tagging, gap analysis, and reporting.

• Create role-based dashboards and reporting tools for analysts, remediation owners, and CISO-level stakeholders.

• Develop frameworks for KPIs and metrics related to security operations.

• Produce documentation for platform configuration, runbooks, and policy/SLA guidelines.

• Assist in business process mapping and the design of current-state and future-state workflows.

• Generate documentation for the Target Operating Model (TOM).

• Support an embedded security team within a large commercial enterprise in the Financial Services sector.

⛳️ Requirements

• Proven experience with Risk-Based Vulnerability Management (RBVM) and CTEM tools and platforms (e.g., Kenna, Zafran, Rapid7, Tenable, Qualys).

• Familiarity with vulnerability management platforms, including connectors, scoring/exploitability models, consolidation logic, and ticketing integration.

• Experience in validating data ingestion accuracy across scanners and source systems.

• Expertise in designing SLA and exploitability/risk-scoring frameworks.

• Background in designing processes for exception handling and risk acceptance.

• Experience with asset and vulnerability de-duplication and inventory reconciliation.

• Proven ability to establish critical/high-priority vulnerability escalation processes.

• Minimum of 5 years of relevant experience in vulnerability management or cybersecurity consulting.

• U.S. Citizenship or Permanent Residency is required.

• Availability to work within the continental United States.

• Experience in API-based system integration and validation testing.

• Scripting and automation experience, particularly with Python, for data tagging, gap analysis, and reporting automation.

• Familiarity with IT Service Management (ITSM) platforms like ServiceNow, including workflow design and ticket lifecycle automation.

• Experience in creating role-based dashboards and reporting for both technical and executive audiences.

• Proven track record in developing KPI and metrics frameworks for security operations.

• Technical writing experience, encompassing platform configuration documentation, runbooks, and policy/SLA documentation.

• Competence in business process mapping and current-state/future-state workflow design.

• Experience in developing Target Operating Model (TOM) documentation.

• Strong cross-functional stakeholder communication skills.

• Ability to work independently within an embedded client team.

🏝️ Benefits

• Medical — A variety of POS health plan options, including an HSA-compatible plan.

• Dental — PPO coverage for preventive, basic, and major services.

• Vision — Annual eye exam, frames, lenses, and contact lens allowance.

• 401(k) — Employer match of up to 5% of eligible compensation.

• Long-Term Disability — 100% employer-paid coverage at 50% of pre-disability earnings.

• Life Insurance & AD&D — 100% employer-paid coverage valued at $10,000 each.

• PTO — 15–25 days of paid time off annually based on tenure.

• Paid Federal Holidays — Observance of all 11 federal holidays.