Senior Vulnerability Manager

Black Duck is seeking a Senior Vulnerability Manager to join their team in Belfast, Northern Ireland, United Kingdom. This role is crucial for managing the enterprise vulnerability management program across cloud, endpoint, and application surfaces, driving risk-based identification, prioritization, and remediation.

Black Duck® provides advanced application security solutions, ensuring trust in software for the regulated, AI-powered world. They help organizations eliminate security, regulatory, and licensing risks, enabling them to make smarter decisions and unleash business innovation with confidence.

Join Black Duck to own and govern the end-to-end vulnerability management lifecycle, applying advanced risk-based prioritization and enforcing remediation SLAs. Apply now to make a significant impact on software security.

Company Overview

Black Duck Software, Inc. is a recognized pioneer in application security, helping organizations build secure, high-quality software. They offer SAST, SCA, and DAST solutions that enable teams to quickly find and fix vulnerabilities in code and application behavior. Black Duck is committed to maximizing security and quality throughout the software development lifecycle.

The company operates with a mission to provide uncompromised trust in software for the regulated, AI-powered world, freeing organizations from tradeoffs between speed, accuracy, and compliance at scale.

Quick Details

• Salary Range: Not Applicable
• Job Type: Full-time
• Qualifications: Bachelors Degree
• Experience: 5 Year+

Key Responsibilities

• Govern the end-to-end vulnerability management lifecycle—intake, scanning, triage, risk scoring, remediation orchestration, verification, and reporting.
• Apply CVSS, EPSS, and CISA KEV signals for risk-based vulnerability prioritization and codify triage logic into policy.
• Enforce remediation SLAs; manage risk acceptances and time-bound exceptions; report exception aging trends to leadership.
• Drive complete and accurate asset coverage across servers, endpoints, containers, cloud services, and applications.
• Design, administer, and optimize enterprise vulnerability scanners for infrastructure, cloud, container, and application layers.
• Design, implement, and maintain enterprise automated patching capabilities across server, endpoint, and cloud workloads.

Requirements

• 5–7+ years in vulnerability management or closely related cybersecurity/IT engineering roles, operating independently and leading others.
• Proven hands-on experience with enterprise vulnerability scanning technologies (infrastructure, cloud, container, application), authenticated scanning, and ITSM/CMDB integrations.
• Hands-on design and operation of enterprise automated patching capabilities.
• Ability to lead complex, cross-domain problems and influence adjacent teams to achieve remediation SLAs.
• Experience maintaining executive-ready metrics covering exposure, SLA adherence, backlog, and asset coverage.
• Proactively identify, assess, and remediate configuration weaknesses in enterprise SaaS applications and cloud platforms.

Benefits

• Opportunity to own and shape the enterprise vulnerability management program.
• Work with cutting-edge application security technologies.
• Collaborate with IT, Cloud, and Product teams to drive significant risk reduction.
• Contribute to a company that prioritizes security, quality, and innovation.
• Be a technical resource and mentor for less experienced team members.
• Ensure audit-ready program evidence to support compliance reviews.