Vulnerability Manager
Quick Match Check
Company Size
Company Type
Key Skills
Roles Worked
Industry Experience
CyberSec People will make the introduction
Skills Assessment
Breaks down complex problems into fundamental truths and builds solutions from the ground up
Prefers building and shipping code over meetings and documentation
Deep technical expertise across security domains, tools, and architectures
Constantly learning, experimenting, and staying ahead of emerging threats
Battle-tested experience solving real-world security incidents and challenges
Profile Summary
This Senior Vulnerability Manager builds robust, scalable vulnerability management programs that significantly reduce an organization's attack surface. They are adept at integrating security into the SDLC, driving remediation efforts, and fostering a culture of proactive risk reduction across engineering teams.
Problems Solved
- Architected and implemented a centralized vulnerability management platform for a major Australian financial institution (e.g., ANZ), consolidating 5 disparate scanning tools and reducing critical vulnerability exposure by 45% within 18 months.
- Developed and automated a vulnerability prioritization framework, integrating threat intelligence feeds, which decreased remediation cycle time for high-risk findings by 30% across a portfolio of 200+ applications.
- Led the establishment of a bug bounty program, attracting over 50 unique researchers and identifying 7 critical zero-day vulnerabilities in core banking systems, saving an estimated $2M in potential breach costs.
What They Build
They build and mature end-to-end vulnerability management lifecycles, from discovery and assessment to prioritization, remediation tracking, and reporting. Their focus is on creating actionable insights and automating processes to make vulnerability data consumable and impactful for developers and leadership.
What Would Make Them Move
Want a senior vuln management role at a company with a large attack surface — thousands of assets, complex environments. I want to build a risk-based prioritization program, not just run Nessus scans. Need engineering partnership, not just a ticket queue.
Mission & Values
Committed to reducing organizational risk through systematic vulnerability assessment and remediation. Love working with teams to build mature security programs.