Manager Continuous Threat Exposure Management

Manager Continuous Threat Exposure Management

Dauch is looking for a Manager, Continuous Threat Exposure Management to join our team. The Manager - Continuous Threat Exposure Management (CTEM) is essential to Dauch’s mission of secure business operations. This role entails identifying threats, managing vulnerabilities, and overseeing security testing programs. Responsibilities include leading vulnerability assessments, red/purple team exercises, and penetration testing services. Collaboration with IT, OT, product security, and vendors is crucial to mitigate risks while supporting business innovation and digital transformation.

• Oversees and administers the Continuous Threat Exposure Management (CTEM) and Penetration Testing program throughout both enterprise and manufacturing environments.
• Develops and implements strategic plans for detecting threats, identifying vulnerabilities, prioritizing risks, and mitigating them.
• Supervises internal and external penetration tests, red teaming, and breach simulations.
• Provides leadership and guidance for vulnerability lifecycle management, including scanning, analysis, remediation tracking, and executive reporting.
• Partners with enterprise infrastructure and application teams to ensure vulnerabilities are understood and addressed according to risk.
• Collaborates with manufacturing and OT teams to improve plant cyber security through vulnerability management testing.
• Integrates threat intelligence into vulnerability prioritization processes and ensure alignment with MITRE ATT&CK and threat-informed defense frameworks.
• Supports audit and compliance initiatives by maintaining documentation and evidence related to threat and vulnerability management.
• Delivers cyber risk awareness and education for business stakeholders.
• All other duties as assigned.

• Bachelor’s degree in Cybersecurity, Computer Science, Engineering, or a related field.
• 10+ years of progressive experience in cybersecurity, with at least 3 years in threat and vulnerability management and/or penetration testing.
• Proven experience managing enterprise-scale vulnerability management tools (e.g., Tenable, Qualys, Rapid7) and penetration testing tools (e.g., Burp Suite, Metasploit, Cobalt Strike).
• Familiarity with regulatory and industry frameworks such as NIST CSF, ISO 27001, NIST SP 800-115, MITRE ATT&CK, and OWASP Top 10.
• Demonstrated ability to manage large-scale vulnerability programs across IT and OT environments.
• Strong understanding of network protocols, operating systems, cloud security (AWS/Azure), and application security concepts.
• Excellent leadership, communication, and stakeholder engagement skills.
• Willingness and ability to travel as needed (up to approximately 20%).

• Experience working in or with large, global manufacturing organizations.
• Relevant certifications such as OSCP, CISSP, GIAC GPEN, GWAPT, or CISM.
• Experience with secure SDLC, Dev Sec Ops , and vulnerability management in CI/CD pipelines.
• Familiarity with industrial control systems (ICS) or OT cybersecurity (e.g., ISA/IEC 62443, NIST 800-82).

Dauch Corporation is a premier Driveline and Metal Forming supplier serving the global automotive industry with a powertrain-agnostic product portfolio that supports electric, hybrid, and internal combustion vehicles. The company is headquartered in Detroit, MI, with operations that span 24 countries and more than 175 locations. Formed through the acquisition of Dowlais Group plc and its subsidiaries - GKN Automotive and GKN Powder Metallurgy, Dauch unites deep engineering roots with global manufacturing capabilities and an entrepreneurial spirit to move mobility forward.

Visit  to learn more.

Dauch will not…