Sr Mgr Enterprise Vulnerability Management

Sr Mgr Enterprise Vulnerability Management

Fort Worth, TX, USA

Posted Monday, March 23, 2026 at 4:00 AM

Company Information:

Elbit America is a leading provider of high-performance products, system solutions, and support services focusing on the defense, homeland security, commercial aviation, and medical instrumentation markets. With facilities throughout the United States, Elbit Systems of America is dedicated to supporting those who contribute daily to the safety and security of the United States. Elbit Systems of America, LLC is wholly owned by Elbit Systems Ltd.

(NASDAQ: ESLT and TASE: ESLT), a global high-technology company engag ed in a wide range of programs for innovative defense and commercial applications. For additional information, visit:  or follow us on You Tube .

Job Summary:

The Senior Manager, Enterprise Vulnerability Management, leads the enterprise vulnerability management function by developing and executing a comprehensive, risk-based strategy to identify, assess, and remediate vulnerabilities across infrastructure, cloud platforms, applications, and third-party services. This role is responsible for defining program metrics, reporting on performance to executive and board stakeholders, and establishing governance frameworks to ensure consistent, effective vulnerability management practices.

The Senior Manager oversees the end-to-end vulnerability lifecycle, enforces operational standards, drives technical integration with leading security tools, and partners with cross-functional teams to prioritize and resolve security risks. Additionally, this leader builds and mentors a high-performing team, fosters a culture of security excellence, and serves as a key advisor to IT, engineering, and business stakeholders on vulnerability risk and remediation.

Key Responsibilities:

Program Leadership & Strategy

• Lead the enterprise vulnerability management function, including strategy, execution, continuous improvement, and performance measurement.
• Develop, align, and evangelize a risk-based vulnerability posture strategy that drives timely and effective remediation across infrastructure, cloud workloads, applications, and third-party services.
• Define key performance indicators (KPIs), metrics dashboards, and executive reporting mechanisms to communicate program effectiveness to senior leaders and board stakeholders.

Operational Execution

• Oversee the end-to-end vulnerability management lifecycle: discovery, validation, prioritization, remediation tracking, and verification of closure.
• Establish and enforce standard operating procedures (SOPs), SLA’s, and governance models to ensure consistent execution across business units.
• Ensure continuous and automated scanning coverage leveraging industry-leading tools (e.g., Crowd Strike, Tenable, Qualys, Rapid7, Wiz, Tanium, or similar) and integrate with ticketing and IT service management workflows.

Technical Oversight

• Lead vulnerability identification across multi-cloud, hybrid infrastructure, container platforms, and enterprise applications.
• Coordinate vulnerability scanning schedules, threat intelligence integration, and risk scoring methodologies (e.g., CVSS, EPSS, internal risk models) to prioritize remediation based on exploitability and business context.
• Partner with Sec Ops, engineering, and platform teams to ensure vulnerabilities are resolved effectively, and appropriate compensating controls are in place when necessary.

Stakeholder Collaboration

• Act as a key security advisor to IT, development, risk, compliance, and business owners regarding vulnerability risk exposure and remediation planning.
• Facilitate vulnerability review boards, risk committees, and cross-team governance forums to drive accountability and risk reduction.
• Build, mentor, and lead a high-performing vulnerability management team, including analysts, engineers, and automation resources.
• Define career paths, set performance expectations, and promote a culture of security excellence.

Education, Experience/Knowledge & License/Certification:

• A bachelor’s degree in computer science, Information Security, Cybersecurity, or related discipline required; a master’s degree is…