Vulnerability Management Lead

Overview

In this role, you lead vulnerability management across Millennium’s infrastructure, cloud, and applications, translating risk into prioritized remediation plans. You’ll work with asset owners to track fixes, guided by threat intelligence and MITRE ATT&CK concepts. You will shape mitigation strategies when patches aren’t immediately feasible and leverage AI-driven processes to scale defense. This role sits at the intersection of security operations and business risk, helping protect a global trading environment.

Responsibilities

• Operate vulnerability discovery and assessment tools across infrastructure, cloud, and applications
• Prioritize vulnerabilities by risk, exploitability, and business context with asset owners to drive closure
• Incorporate cyber threat intelligence to strengthen prioritization and risk scoring
• Develop mitigation strategies for unpatchable vulnerabilities (compensating controls, virtual patching, automated workflows)
• Apply AI-driven prioritization and automation to scale coverage and remediation
• Produce vulnerability metrics and reporting for leadership
• Support penetration testing and red team engagements and coordinate remediation
• Continuously improve discovery coverage and reduce time to remediation across the environment

Key requirements

• 5+ years in vulnerability management with exposure to cyber threat intelligence
• Familiarity with vulnerability scoring and prioritization frameworks; experience with MITRE ATT&CK, threat actor techniques, CVE feeds
• Ability to design and implement mitigation/remediation when patching is not feasible
• Experience tracking remediation across distributed asset owners and cross-functional collaboration
• Strong communication skills to explain risk to technical and non-technical stakeholders; senior executive engagement preferred
• Hands-on experience across on-prem and cloud, Windows, Linux, macOS, containers; scripting in Python, PowerShell, Bash or similar
• Experience with governance of AI models, tools, and frameworks; ability to work independently in a fast-paced environment
• Bachelor in Computer Science/Engineering/Cybersecurity/Information Security or related field or equivalent work experience; relevant certifications such as GPEN, OSCP, GCTI, CISSP; experience in financial services or regulated industry
• strong communication
• stakeholder engagement
• cross-functional collaboration
• vulnerability discovery tools
• MITRE ATT&CK
• threat intelligence feeds

Report this job