Vulnerability Operation Center Lead

About the role

Join a forward‑thinking technology organization at the forefront of AI infrastructure as the leader of a Vulnerability Operations Center. You will build and run a team that protects large‑scale cloud, infrastructure, and hardware environments, shaping processes, automation, and cross‑functional collaboration to reduce risk.

Key responsibilities

• Establish and lead the Vulnerability Operations Center, defining governance, processes, and best practices for the full vulnerability lifecycle.
• Manage detection, validation, triage, remediation tracking, and reporting across cloud platforms, products, and hardware.
• Enhance automated triage with data enrichment, AI‑assisted workflows, contextual risk scoring, and vulnerability correlation.
• Perform hands‑on validation and prioritisation of critical and zero‑day findings.
• Collaborate with engineering, security, compliance, and operations to ensure timely remediation.
• Drive patch‑management improvements and oversee remediation across multiple engineering teams.
• Handle vulnerability intake from scanners, penetration tests, bug‑bounty programs, and threat‑intelligence sources.
• Prioritise findings using CVSS, EPSS, SSVC, exploitability, asset criticality, and business impact.
• Develop and automate internal vulnerability management and security orchestration platforms.
• Define metrics, monitor trends, and present KPIs to security leadership.

Required profile

• 5‑8 years of information‑security experience, with at least 3 years focused on vulnerability management or security operations.
• Strong expertise in vulnerability management for cloud‑native and enterprise infrastructure.
• Deep knowledge of vulnerability assessment methodologies and risk‑based prioritisation frameworks.

Required skills

• Vulnerability management processes and tools
• Cloud platforms: AWS, Google Cloud, Azure
• Vulnerability data sources: CVE, NVD
• Risk frameworks: CVSS, EPSS, SSVC
• AI‑assisted workflow automation
• Security orchestration and automation platforms
• Patch‑management processes
• Penetration testing and bug‑bounty program integration
• Threat‑intelligence integration