Green Team Lead

Job Description

Vulnerability Prioritization & Risk Management

• Lead enterprise vulnerability prioritization by leveraging vulnerability intelligence (VM, ASM, CTEM) into risk-prioritized, actionable work
• Establish and enforce vulnerability SLAs aligned to risk tiers.
• Drive risk-based decision-making, including mitigation, remediation, or formal risk acceptance.
• Continuously improve prioritization models leveraging exposure management data and business context.
• Validate data quality and eliminate false positives.[SJ1.1]

Remediation Execution & Coordination

• Lead cross-functional remediation efforts across infrastructure, application, and business teams.
• Ensure clear ownership and accountability for all vulnerabilities.
• Drive remediation through structured workflows and automation platforms. [SJ2.1]
• Escalate risks when remediation timelines are not met.

Program Operations & Governance

• Own daily vulnerability management operations, including scanning, triage, ticketing, and validation.
• Develop and maintain policies, standards, and procedures for vulnerability lifecycle management.
• Ensure alignment with regulatory and audit requirements.
• Maintain risk register entries for accepted risks and exceptions.

Reporting & Metrics

• Deliver executive level reporting on vulnerability posture and trends.
• Define and track KPIs such as SLA adherence and mean time to remediate.
• Provide actionable insights to leadership for risk-based decision-making.

Automation & Tooling

• Contribute to optimization of vulnerability management platforms. [SJ3.1]
• Drive automation for vulnerability ingestion, prioritization, and remediation workflows.
• Improve integration and data accuracy within CMDB and exposure management systems.

Leadership & Stakeholder Engagement

• Lead and mentor a team of vulnerability analysts and engineers.
• Serve as SME escalation point for complex vulnerability scenarios.
• Collaborate with security architecture, engineering, and GRC teams. [SJ4.1]
• Communicate effectively with technical teams and executive leadership.
• Collaboration with key stakeholders in Infrastructure/Platform, Application, Data and Device teams.

Skills and Requirements

• 7+ years in cybersecurity with experience in vulnerability management or exposure management.
• Experience leading teams or cross-functional initiatives.
• Strong understanding of the vulnerability lifecycle and risk-based prioritization.
• Strong reporting and analytics skills.
• Experience with ASM/CAASM, SOAR, and Exposure Management platforms as well as Enterprise Vulnerability Management tools (e.g., Qualys, Wiz, Defender, Armis, Swimlane VRM, Elastic). [SJ5.1]
• Familiarity with NIST, CIS frameworks, and regulatory requirements.
• Experience maturing or building vulnerability management programs.

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal employment opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment without regard to race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or the recruiting process, please send a request to [email protected].