Cyber Testing & Scanning Leader

Cyber Testing & Scanning Leader

The Cyber Testing & Scanning Leader is a senior-level role responsible for driving the organization's vulnerability management strategy, ensuring proactive identification, assessment, and remediation of security weaknesses across enterprise infrastructure. This position requires advanced technical expertise, leadership skills, and the ability to influence cross-functional teams to maintain a resilient security posture.

Key Accountabilities / Deliverables :

• Define and evolve the vulnerability management program roadmap aligned with organizational risk objectives.
• Establish governance for vulnerability lifecycle management, including prioritization frameworks and SLA enforcement.
• Mentor and guide junior analysts, fostering a culture of continuous improvement and knowledge sharing.
• Oversee enterprise-wide vulnerability scanning across network, cloud, and application environments using platforms such as Qualys, Tenable, or Rapid7.
• Ensure comprehensive asset coverage and maintain accurate CMDB integration.
• Lead risk evaluation efforts using CVSS, QDS, and business impact analysis.
• Drive prioritization strategies for remediation based on exploitability and threat intelligence.
• Coordinate with IT, DevOps, and application teams to ensure timely patching and mitigation.
• Enforce SLA compliance (e.g., Critical : 7 days, High : 30 days, Medium : 60 days, Low : 180 days).
• Escalate systemic issues and propose long-term remediation strategies.
• Act as SME during incident investigations involving vulnerability exploitation.
• Partner with SOC and Threat Hunting teams to integrate vulnerability intelligence into detection and response workflows.
• Ensure adherence to regulatory frameworks (NYDFS, PCI-DSS, ISO 270001).
• Deliver executive-level dashboards and trend analysis on vulnerability posture and remediation progress.
• Own and optimize vulnerability management platforms.
• Design automation workflows and scripts (PowerShell, Python) for patch orchestration and reporting.
• Lead red team and penetration testing initiatives.
• Champion vulnerability-related awareness programs and tabletop exercises.

Technical Knowledge and Understanding :

Experience :

Applicants must be authorized to work for any employer in the U.S. We are unable to sponsor or take over sponsorship of an employment Visa for this position. #LI-Hybrid

At Core Specialty, you will receive a competitive salary and opportunities for professional development and advancement. We offer medical, dental, vision, and life insurances; short and long-term disability; a Company-match of 100% of a 6% contribution 401(k) plan; an Employee Assistance Plan; Health Savings Account, Flexible Spending Account, Health Reimbursement Account, and a wellness program.