Senior Manager, Cyber Threat Exposure Management

AeroVironment•Huntsville, AL

About The Position

The Manager of Cyber Threat Exposure Management leads a small team responsible for identifying, validating, prioritizing, and driving remediation of cybersecurity exposures across the enterprise. The role manages the threat exposure life cycle across endpoints, servers, networks, cloud environments, applications, and identity systems. It is a hands-on leadership position combining personnel management, technical analysis, and coordination with IT and business stakeholders. The manager translates vulnerability findings, security configuration weaknesses, attack surface changes, and threat intelligence into actionable remediation priorities based on business impact and likelihood of exploitation. The role develops and maintains the threat exposure management strategy, roadmap, procedures, and operating cadence; oversees discovery and assessment; coordinates risk-based remediation; and works across security, IT, engineering, and governance teams. It also maintains dashboards and leadership reporting, measures risk reduction and recurring exposure trends, and automates workflows where practical. The position requires Secret clearance. It involves access to ITAR- and/or EAR-controlled information, so applicants must qualify as a U.S. person under those regulations or be eligible for an export license. Some positions require current U.S. citizenship due to contract requirements; the posting also states ITAR U.S. Citizenship required.

Requirements

Bachelor’s degree in cybersecurity, information technology, computer science, or a related field, or equivalent professional or military experience.
Five or more years of cybersecurity experience, including substantial experience in vulnerability management, security engineering, or threat exposure management.
Two or more years of team leadership, technical lead, or supervisory experience.
Hands-on experience with enterprise vulnerability assessment platforms, security configuration tools, and remediation workflows.
Working knowledge of Windows and Linux systems, enterprise networking, cloud services, identity security, and common attack techniques.
Ability to assess vulnerabilities using technical severity, exploitability, threat intelligence, and business context.
Experience coordinating remediation across multiple technical teams and communicating risk to technical and nontechnical stakeholders.
Strong analytical, documentation, organizational, and personnel leadership skills.
Ability to work in an office environment and sit and stand for long periods; talk, hear, and use hands and fingers to operate a computer and telephone keyboard.
Must meet the stated U.S.-person/export-control eligibility requirements; the posting states ITAR U.S. Citizenship required.

Nice To Haves

Experience with Microsoft Defender Vulnerability Management, Microsoft Defender for Endpoint, Microsoft Sentinel, Tanium, Tenable, Qualys, Rapid7, or comparable platforms.
Experience with Microsoft Azure, Microsoft 365, hybrid environments, and GCC High.
Familiarity with CMMC, NIST SP 800-171, NIST SP 800-53, and CIS Benchmarks.
Experience supporting aerospace, defense, manufacturing, or other regulated environments.
Experience with attack surface management, attack path analysis, or security control validation.
Experience automating security workflows using PowerShell, Python, APIs, and enterprise ticketing platforms.
Relevant cybersecurity certifications demonstrating technical or management proficiency.

Responsibilities

Lead, mentor, and develop a team of 2–3 cybersecurity personnel, establishing responsibilities, priorities, and performance expectations.
Manage daily operations, workload assignments, technical development, and quality of deliverables.
Develop and maintain the threat exposure management strategy, roadmap, procedures, and operating cadence.
Establish processes for exposure discovery, validation, prioritization, remediation tracking, and closure verification.
Manage supporting tools and service providers and identify opportunities to improve coverage, efficiency, and automation.
Oversee vulnerability scanning, asset discovery, external attack surface monitoring, and security configuration assessments.
Identify gaps in asset inventory, scanning coverage, security tooling, and ownership that could leave exposures undetected or unresolved.
Assess vulnerabilities, misconfigurations, excessive privileges, unsupported technologies, and exposed services across enterprise environments.
Coordinate authorized security testing and attack path analysis to validate exposures and assess existing safeguards.
Incorporate findings from penetration tests, security assessments, threat intelligence, and incidents into the exposure management program.
Prioritize exposures using exploitability, evidence of active exploitation, asset criticality, external accessibility, business impact, and compensating controls.
Translate technical findings into clear remediation requirements for system owners, IT operations, engineering, and application teams.
Establish risk-based remediation timelines and track findings through verified closure.
Coordinate urgent assessment and remediation for actively exploited vulnerabilities and emerging threats.
Escalate overdue or high-impact exposures and communicate remediation barriers to cybersecurity leadership.
Manage exception documentation and review cycles, routing residual risks to the appropriate authority for formal acceptance.
Partner with security operations and incident response teams to connect exposure findings with detection opportunities, threat activity, and response priorities.
Work with infrastructure, endpoint, identity, network, cloud, and application teams to address recurring weaknesses and improve secure configurations.
Support governance, risk, and compliance teams with evidence of exposure identification, remediation, exceptions, and control effectiveness.
Integrate exposure management requirements into technology onboarding, change management, and system lifecycle processes.
Maintain dashboards and leadership reporting on assessment coverage, critical exposures, remediation performance, aging findings, and exceptions.
Measure verified risk reduction and recurring exposure trends to identify systemic issues.
Automate scanning workflows, findings enrichment, ticket creation, ownership assignment, and remediation validation where practical.
Provide leadership with recommendations on remediation priorities, resource constraints, and opportunities to strengthen security posture.