Sr. Manager, Vulnerability & Threat Management

Role Purpose

Corning has an immediate opening for a motivated Threat & Vulnerability Management leader to join Corning's Global Cybersecurity Operations organization. Our goal is to stay ahead of and maintain a technical advantage over our adversaries by using the latest technical advancements by providing global capabilities that our Cyber Defenders rely on.  While the primary focus for this position is vulnerability identification and remediation, you will gain cross-functional experience as you interface directly with our cyber defenders to understand their mission and capabilities.  As a key part of this team, your responsibilities will include all aspects of the vulnerability management, including operation of the company’s vulnerability scanning solution prioritizing remediation efforts, communicating with leadership and system owners to drive remediation closure, and developing effective metrics. In this position, you will have opportunities to interact with both leadership and key stakeholders across the corporation and will be challenged with the opportunity for growth in a highly collaborative environment. 

This role has the ability to be virtual

Key Responsibilities

• Lead and coordinate the activities of the Threat & Vulnerability Management team, including but not limited to vulnerability identification, inventory, risk assessment and prioritization, continuous monitoring, remediation planning, and reporting.
• Optimize and enhance the vulnerability scanning capability.
• Improve and mature vulnerability reporting to key stakeholders and drive remediation efforts by communicating, clearly articulating, and prioritizing risk impact to all stakeholders to convey the urgency and need to remediate a vulnerability commensurate with the risk it presents.
• Deliver and enhance existing vulnerability and remediation metrics
• Develop the integration and automation strategy around multiple VM toolsets
• Perform risk-based technical assessments on technical vulnerabilities.
• Stay abreast of emerging threats and promote understanding of associated risk with stakeholders using a comprehensive communication strategy.
• Review and analyze vulnerability data to identify trends and patterns.
• Deliver vulnerability findings and drive remediation efforts.
• Advising employees responsible for remediation on the best reduction and remediation practices.
• Influence the development of vulnerability management standards and security policies.
• Oversee the vulnerability management processes, suggesting applicable change controls, and security exceptions.
• Design and implement new or enhanced vulnerability reporting and monitoring solutions.
• Assist and support incident response as needed

Skills Required

• Bachelor's degree in computer science or related field
• 5+ years of Vulnerability & Threat Management or related experience
• Able to evaluate trade-offs and come up with innovative ways to address vulnerabilities.
• Ability to think critically and find solutions to complex and often ambiguous security challenges.
• Strategic mindset with the ability to align vulnerability management with organizational goals by quantifying, prioritizing, and effectively communicating risks in the context of business objectives.
• Demonstrated ability to leverage emotional intelligence to creatively lead, manage, motivate, and develop high performing team.
• Use active listening and other interpersonal skills to effectively coach, mentor, and collaborate.
• Experience presenting to both technical and non-technical audiences.
• Capable of communicating risk to leadership.
• Independent resilience to initiate, follow-up, and ensure the completion of tasks with internal team and external stakeholders.
• Demonstrated written communication skills, with a focus on providing clarity of remediation efforts to both system owners and leadership.

Preferred Skills and Experiences

• Experience with cyber threats, cyber risk, and vulnerability management.
• Experience with intelligence driven defense approach.
• Experience in assessing Industrial Control Systems (ICS), Operation Technologies (OT), and manufacturing networks.
• Experience conducting or leading incident response efforts.
• Experience with threat models, such as Diamond, Cyber Kill Chain, ATT&CK, Racetrack, etc.
• Experience participating in penetration testing.
• Experience with exploit research