Senior Restricted Secure / High Secure Exposure Management Lead

About the role

The Senior Restricted Secure / High Secure Exposure Management Lead is responsible for leading technical and operational exposure management across RS/HS environments, ensuring vulnerabilities and attack‑path risks are continuously identified, prioritized and remediated.

Key responsibilities

• Lead day‑to‑day exposure‑management execution, establishing a consistent operating model for identification, validation, prioritization, assignment and closure of security exposures.
• Operate and maintain enterprise vulnerability detection platforms (Rapid7 InsightVM, InsightAppSec, CrowdStrike Falcon Spotlight) covering infrastructure, endpoints, applications, network devices and approved cloud/container environments.
• Validate findings, investigate false positives, reconcile duplicates and ensure accurate asset‑owner mapping.
• Support governance through Archer IT Security Vulnerabilities Program, documenting risk acceptances, remediation exceptions and audit‑ready evidence.
• Implement risk‑based prioritization using technical severity, exploit intelligence, asset criticality and RS/HS impact.
• Coordinate remediation across infrastructure, endpoint, network, application, database, identity, cloud and platform teams, enforcing service‑level targets.
• Develop dashboards and metrics (coverage, backlog, MTTR, SLA compliance) using ServiceNow, Power BI and other data sources.
• Provide concise risk‑posture updates and escalation reports to security leadership and RS/HS stakeholders.

Required profile

• 8+ years of experience in cybersecurity, vulnerability or exposure management.
• 4+ years leading vulnerability management capabilities in a complex enterprise.
• Proven experience coordinating remediation across diverse technology stacks and supporting highly regulated, high‑assurance environments.
• Strong technical judgment, ability to communicate complex findings to both technical and leadership audiences.

Required skills

• Rapid7 InsightVM
• Rapid7 InsightAppSec
• CrowdStrike Falcon Spotlight / Exposure Management
• Archer IT Security Vulnerabilities Program
• ServiceNow Vulnerability Response
• Power BI
• Vulnerability detection, exposure management, risk‑based prioritization