[Remote] Vulnerability & Cloud Security Program Manager

Note: The job is a remote job and is open to candidates in USA. NinjaOne provides endpoint management and security solutions that automate IT operations for organizations and managed service providers. The Vulnerability & Cloud Security Program Manager will lead enterprise vulnerability management and cloud security posture management programs, oversee risk identification and remediation, administer security platforms, and collaborate with engineering, DevOps, and infrastructure teams to improve security maturity and compliance.

Responsibilities

• Lead and operate the full vulnerability management and CSPM lifecycle, ensuring timely discovery, assessment, prioritization, and remediation
• Administer and optimize our vulnerability management and CSPM platforms, including policies, integrations, reporting, and automation
• Monitor cloud and infrastructure environments to identify misconfigurations, excessive permissions, and compliance drift, primarily in AWS
• Partner with engineering and DevOps teams to drive remediation efforts, facilitate triage discussions, and provide technical guidance on complex issues
• Align security practices with frameworks such as FedRAMP, NIST CSF, ISO 27001, and CIS Controls
• Track and report key KPIs and risk metrics to leadership, including SLA compliance and vulnerability trends
• Automate detection, remediation workflows, and tool integrations to enhance efficiency and expand security capabilities
• Other duties as needed

Skills

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or equivalent experience
• 5+ years of experience in vulnerability management and at least 2+ years in cloud security
• Hands-on experience with CSPM tools, vulnerability detection platforms, and automation (Wiz, AWS Inspector, Nessus, OpenSCAP preferred)
• Strong understanding of AWS security best practices and cloud-native architectures
• Familiarity with vulnerability scoring systems like CVSS and risk-based prioritization
• Excellent communication, collaboration, and stakeholder management skills
• Location - We are flexible on remote working from home, if you are located in the USA and reside in one of the following states - CA, CO, CT, FL, GA, *IL, KS, ME, MA, MD, NJ, NC, NY, OR, TN, TX, VA, and WA
• Due to federal government security requirements associated with our FedRAMP-authorized environment, candidates must be U.S. citizens or lawful permanent residents
• *Due to operational policies, NinjaOne is unable to hire for this role within the city limits of Chicago. We will consider all qualified candidates who reside outside of the city proper or are willing to self-relocate
• Security certifications such as CISSP, AWS Security Specialty, or GIAC Cloud Security are a plus
• Preferred knowledge of regulatory and compliance frameworks such as PCI DSS, HIPAA, SOX, FedRAMP

Benefits

• Full-time work that is hybrid remote
• Medical, dental, and vision insurance
• 401(k) plan
• Unlimited PTO
• Opportunity for growth and advancement
• Life insurance coverage

Company Overview