Subcontractor

Area(s) of responsibility
Role Summary
We are seeking a highly experienced Cybersecurity professional to lead Vulnerability Management, Attack Surface Management, Security Risk Governance, and Security Infrastructure Operations across the enterprise. The candidate will be responsible for architecting, implementing, and optimizing Tenable Nessus, BitSight, and Infoblox solutions while driving enterprise-wide risk reduction initiatives, vulnerability remediation programs, DNS security, compliance efforts, and cybersecurity governance.
Key Responsibilities
Lead the administration, engineering, and lifecycle management of Tenable Nessus, BitSight, and Infoblox platforms.
Define and implement enterprise Vulnerability Management and Risk Management strategies aligned with security and compliance objectives.
Manage large-scale vulnerability assessment programs across on-premises, cloud, network, server, endpoint, and application environments.
Establish risk-based vulnerability prioritization methodologies and remediation governance processes.
Drive vulnerability remediation programs by collaborating with Infrastructure, Cloud, Application, Network, and Security Operations teams.
Develop executive-level dashboards, KPI/KRI metrics, risk scorecards, and remediation tracking reports.
Oversee cyber risk exposure monitoring and external attack surface assessment using BitSight.
Assess third-party security posture, cybersecurity ratings, and supplier risk metrics, and provide strategic recommendations to reduce business risk.
Lead security posture reviews and risk assessments and provide recommendations to senior leadership.
Architect, administer, and optimize Infoblox DDI (DNS, DHCP, and IP Address Management) infrastructure.
Ensure high availability, scalability, performance, and security of enterprise DNS and IP management services.
Implement DNS security controls, network visibility solutions, and operational best practices.
Lead upgrades, migrations, patching, capacity planning, performance tuning, and operational enhancements for security platforms.
Support internal and external audits, regulatory assessments, compliance initiatives, and risk management programs.
Develop operational standards, governance frameworks, SOPs, runbooks, and service improvement plans.
Drive automation and process optimization initiatives to improve efficiency and reduce operational risks.
Engage with vendors and stakeholders to define product roadmaps, resolve complex issues, and evaluate emerging technologies.
Mentor junior engineers and provide technical leadership across vulnerability management and security infrastructure domains.
Required Skills
Security Platforms
Tenable Nessus
BitSight
Infoblox DDI
Technical Expertise
Enterprise Vulnerability Management
Risk-Based Vulnerability Prioritization
Security Risk Assessment & Governance
External Attack Surface Management
Third-Party Risk & Security Ratings
DNS, DHCP & IP Address Management (DDI)
DNS Security & Network Infrastructure Security
Security Compliance & Regulatory Requirements
Security Architecture & Engineering
Security Reporting & Executive Dashboarding
Security Operations & Governance
Process Automation & Continuous Improvement

Work arrangement
No