Manager, Vulnerability Operations

Vantive•Deerfield, MA

17d•$124,000 - $155,000

About The Position

Vantive is a vital organ therapy company on a mission to extend lives and expand possibilities for patients and care teams everywhere. For 70 years, our team has driven meaningful innovations in kidney care. As we build on our legacy, we are deepening our commitment to elevating the dialysis experience through digital solutions and advanced services, while looking beyond kidney care and investing in transforming vital organ therapies. Greater flexibility and efficiency in therapy administration for care teams, and longer, fuller lives for patients— that is what Vantive aspires to deliver. We believe Vantive will not only build our leadership in the kidney care space, it will also offer meaningful work to those who join us. At Vantive, you will become part of a community of people who are focused, courageous and don’t settle for the mediocre. Each of us is driven to help improve patients’ lives worldwide. Join us in advancing our mission to extend lives and expand possibilities. Position Summary We are seeking an experienced and driven Vulnerability Operations Manager to lead our enterprise vulnerability management and continuous threat exposure program. In this role, you will oversee the discovery, triage, risk prioritization, and remediation tracking of security flaws across our multi-cloud, on-premises, and product environments. You will bridge the gap between security engineering and IT operations, collaborating closely with cross-functional teams to reduce risk exposure and ensure compliance.

Requirements

5–7+ years of overall experience in cybersecurity or IT operations.
3+ years in senior operational role focused on vulnerability or exposure management.
Deep familiarity with vulnerability scanners and exposure management tools (Tenable, Qualys, Rapid7, Wiz,).
Knowledge and practical use of Frontier AI models.
Strong grasp of networking protocols, operating systems (Windows/Linux), and cloud architecture.
Exceptional communication abilities to translate complex technical risk data into executive-level insights.

Nice To Haves

CISSP, CISM, GIAC (GPEN, GEVA), or vendor-specific platform certifications.
Experience working in regulated industries (Financial Services, Healthcare, or Federal/NIST frameworks).

Responsibilities

Own and continuously improve the enterprise vulnerability management lifecycle, strategy, and operating procedures.
Oversee routine and credentialed vulnerability scans across infrastructure, cloud services (AWS/Azure), endpoints, and applications.
Rank vulnerabilities using frameworks like CVSS, EPSS, CISA Known Exploited Vulnerabilities (KEV), threat intelligence, and asset business criticality.
Partner with system, network, and application engineering teams to establish Service Level Agreements (SLAs), track remediation plans, and resolve POA&Ms (Plans of Action and Milestones).
Manage enterprise vulnerability platforms (e.g., Tenable, Qualys, Rapid7, Wiz) and drive operational efficiencies via API-driven automation and scripting (Python, PowerShell).
Generate executive dashboards, KPIs, and exposure-reduction metrics for leadership and compliance audits.
Provide immediate exposure analysis and vulnerability context during active cyber incident investigations.