CrawlJobs Logo

Vulnerability Management Technical Project Lead

https://www.soprasteria.com Logo

Sopra Steria

Location Icon

Location:
India , Noida

Category Icon
Category:
-

Job Type Icon

Contract Type:
Not provided

Salary Icon

Salary:

Not provided

Job Description:

The Tech Lead/ServiceLine Lead will be responsible for the operational, organisational, and strategic management of activities related to Vulnerability Management (VM), CTI incidentology, and COD controls. Will act as the primary interface between the Client (CYB, TGITS, Divisions), operational teams, and governance bodies, ensuring service quality, performance, and continuous improvement. In addition of this governance role, he/she is also responsible for delivering & managing the team.

Job Responsibility:

  • Monitoring of critical P0 / P1 vulnerabilities
  • Steering CTI incidentology
  • Execution and governance of COD controls
  • Organisation of committees and reporting
  • Operational management and team skill development
  • Contribution to process, tool, and KPI optimisation
  • Promptly responding to P0/P1 vulnerabilities, including identification, assessment, patching, documentation, and development of remediation plans when patching is not possible
  • Coordinate and oversee P0 vulnerability follow-up meetings, communicate updates and remediation progress, escalate unresolved issues, and ensure compliance with established deadlines
  • To attend, present & track regular meetings and committee sessions with vulnerability status, track remediation efforts, report key performance indicators, and coordinate with divisions on security tools and control enhancements
  • Oversees the execution, analysis, and remediation of six COD controls, ensuring effective risk reduction and planning for additional controls to further mitigate cyber threats
  • Responsible for organising and coordinating the controls and remediation team by planning activities, distributing workloads, managing priorities, ensuring service continuity, and overseeing training, skills development, and leave management
  • Actively contribute to automation initiatives, enhance data reliability, optimize monitoring tools and processes, drive operational efficiency, and support the evolution of services to meet client expectations

Requirements:

  • Total Experience Expected: 08-10 years
  • Bachelor's degree or Master's in Computer Science, Engineering, or related field
  • Proven leadership experience
  • Strong people management and client‑facing governance skills
  • Executive communication (FR/EN written & verbal reporting
  • Crisis management & escalation handling for P0/P1 situations
  • Data‑driven decision making using KPIs, dashboards, and trends
  • Continuous improvement & automation mindset
  • Proficiency in ServiceNow SECOPS (certification preferred), vulnerability detection and monitoring tools (Microsoft Defender for Endpoint EDR/XDR, WIZ, NESSUS PRO, Dynatrace), CMDB, VISIT, reporting tools (PowerBI, PowerPoint), and adherence to security standards and Client SLAs is required

Nice to have:

  • ServiceNow SECOPS certification
  • CISSP / CISM / ISO 27001 certifications
  • GIAC (GREM / GCED / GCTI) certifications
  • Cloud and Microsoft security certifications
  • Advanced degrees or certifications are preferred

Additional Information:

Job Posted:
May 05, 2026

Employment Type:
Fulltime
Work Type:
On-site work
Job Link Share:

Looking for more opportunities? Search for other job offers that match your skills and interests.

Briefcase Icon

Similar Jobs for Vulnerability Management Technical Project Lead

Technical Project Manager

Provide technical project management for the delivery of TSA compliance projects...
Location
Location
United Kingdom , London
Salary
Salary:
Not provided
communityfibre.co.uk Logo
Community Fibre
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Bachelor’s degree, ideally in engineering, IT, or a related field
  • PMP, PRINCE2, CSM certifications
  • Proven experience (5+ years) in technical project management within the telecommunications, cybersecurity sector or network security projects
  • Experience in a regulated industry, such as Government, Telecommunications, Finance or other relevant sectors
  • Strong understanding of UK telecom regulations, especially the Telecommunications (Security) Act 2021 and related codes of practice and security technologies
  • Experience managing complex, multi-tiered infrastructure projects with security and compliance components
  • Experience with NCSC guidance, ISO 27001, or NIST frameworks
  • Proficiency in MS Project, Jira, and other PM tools
  • Familiarity with Agile/Scrum methodologies and certified in project management
  • Excellent communication and stakeholder management skills, including experience working with regulators and government bodies
Job Responsibility
Job Responsibility
  • Oversee all stages of TSA-related projects from inception to completion
  • Assist with other project deliveries as needed that could directly impact TSA project timelines or objectives
  • Optimise the delivery flow of teams involved in projects, actively address risks, issues, and dependencies
  • Proactively seek a creative solution to resolve identified issues
  • Develop comprehensive project plans, schedules, and budgets where necessary, aligning with the overall TSA delivery programme
  • Coordinate internal teams, subcontractors, and vendors for smooth execution
  • Verify technical feasibility and adherence to TSA standards
  • Offer guidance on deploying and maintaining privileged access and monitoring systems
  • Carry out risk assessments and put mitigation strategies into action
  • Manage quality assurance and ensure objectives are achieved
What we offer
What we offer
  • 25 days holiday to enjoy, increasing by 1 day for each year of service up to 28 days
  • Birthday leave
  • Cycle to work scheme
  • Flexible WFH policy
  • Private Health Cover
  • Fulltime
Read More
Arrow Right

Director, Vulnerability Management

The Director of Vulnerability Management takes full accountability for running t...
Location
Location
United States , Philadelphia
Salary
Salary:
Not provided
comcastcorporation.com Logo
Comcast
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • 6-8 years experience of leading, mentoring, and growing high-performing teams within the vulnerability management domain
  • Proven experience managing vulnerability management programs at enterprise scale
  • Ability to respond quickly to emerging vulnerabilities and implement immediate remediation measures
  • Comfortable operating under high-pressure conditions with competing priorities
  • Strong technical expertise in vulnerability management platforms and scanning technologies
  • Executive presence with the ability to engage and influence senior leadership effectively
  • Expertise in reporting and metrics to drive accountability and transparency
  • Strong problem-solving and analytical skills to assess risk and develop mitigation strategies
  • Ability to lead complex projects and collaborate across multiple business units
  • Bachelor's Degree
Job Responsibility
Job Responsibility
  • Leads projects, or delegates and supervises project leaders, for security initiatives involving the hardware and application systems
  • Leads and is accountable for scanning operations, data and metrics, and leading projects in the overall VM landscape
  • Maintain, configure and operate the vulnerability management platforms to optimal levels
  • A strong focus on reporting and metrics to ensure that risk is constantly being addressed and programs are in place to continuously improve the security posture of Comcast from a vulnerability management perspective
  • A strong and confident people leader that aligns to Comcast values and helps to coach, mentor and grow the team
  • Works in close alignment with internal Security Development Lifecycle (SDL) coaches and our security leads to help drive down vulnerabilities across the enterprise
  • Collaborates with other Information Technology departments and key business areas to ensure information security requirements are defined, documented, tested and delivered as part of project deliverables
  • Performs sophisticated analytical tasks to assess risk and determines strategies required to resolve issues, accurate technical security problems, or mitigate risk
  • Assists in the preparation of budgets and forecasts
  • Selects, develops and evaluates personnel to ensure efficient operations within department
What we offer
What we offer
  • Paid Time off
  • Physical Wellbeing benefits
  • Financial Wellbeing benefits
  • Emotional Wellbeing benefits
  • Life Events + Family Support benefits
  • Fulltime
Read More
Arrow Right

Cybersecurity Red Team Project Manager

The Cyber Security Project Manager focuses on coordinating penetration testing p...
Location
Location
Belgium , Brussels
Salary
Salary:
Not provided
https://www.soprasteria.com Logo
Sopra Steria
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Technical expertise in system security vulnerabilities, remediation techniques, and network/web protocols (e.g., TCP/IP, UDP, IPSEC, HTTP)
  • experience in network, web application, and mobile penetration testing
  • familiarity with penetration testing tools and suites (e.g., Kali Linux, Burp Suite, Metasploit, Cobalt Strike, Mimikatz)
  • understanding of vulnerability scoring systems (CVSS) and frameworks (MITRE ATT&CK)
  • software development skills (C/C++, Java, Python) are advantageous
  • at least one relevant security certification (e.g., CEH, GPEN, GXPN, OSCP, OSC, or equivalent).
Job Responsibility
Job Responsibility
  • Coordinate all project activities with internal stakeholders (Lead Penetration Tester, Awareness Expert, Technical Quality Manager) and the customer
  • plan and execute penetration testing tasks, including scoping meetings and drafting the penetration testing plan
  • prepare and control access rights for penetration tests
  • refine and manage the security test calendar/schedule, ensuring tasks are executed according to plan
  • proactively inform stakeholders (e.g., ECB) about issues such as delays, resource unavailability, or other factors affecting testing or timelines
  • oversee quality assurance for penetration tests, including reviewing penetration testing reports
  • coordinate threat-based testing with the Lead Penetration Tester and awareness sessions with the Awareness Expert
  • support process improvement and documentation of vulnerability management in collaboration with the Technical Quality Manager
  • facilitate stakeholder communication and ensure completeness of handovers and knowledge transfer between resources.
What we offer
What we offer
  • Mobility options (including a company car)
  • insurance coverage
  • meal vouchers
  • eco-cheques
  • continuous learning opportunities through the Sopra Steria Academy
  • the opportunity to connect with fellow Sopra Steria colleagues at various team events.
  • Fulltime
Read More
Arrow Right

Technical Engagement Manager II

Bugcrowd is seeking a highly skilled Technical Engagement Manager II (TEM II) to...
Location
Location
Australia
Salary
Salary:
Not provided
bugcrowd.com Logo
Bugcrowd
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • 4-6 years of experience in a customer-facing technical role such as implementation, solutions architecture, technical program management, or professional services
  • Deep knowledge of pentest, bug-bounty and red-team methodologies
  • Strong problem solving skills and ability to manage multiple projects simultaneously
  • Excellent written & verbal communication with customer facing mindset
  • Ability to work collaboratively in a cross functional environment
Job Responsibility
Job Responsibility
  • Lead the end to end technical onboarding and configuration of Bug Bounty, Vulnerability Disclosure, Red team and pentest programs for new and existing customers
  • Translate customer security requirements into tailored program designs and platform configurations
  • Conduct technical program reviews, kickoff meetings, and walkthroughs with customers and internal stakeholders
  • Troubleshoot technical issues related to platform integrations, vulnerability workflows and reporting
  • Act as a technical point of contact during program launches, ensuring smooth transitions and early success
  • Provide expert guidance on offensive security engagements, vulnerability triage, communication workflows, and integration best practices
  • Collaborate closely with the Customer Relationship Managers and sales teams to align technical delivery with customer expectations
  • Partner with Line of Business Owners, Product, Engineering and Operations team to relay customer feedback and advocate for feature enhancements
  • Assist in developing and improving internal onboarding playbooks, technical documentation, and enablement materials
  • Support continuous improvement of delivery processes to drive consistency, quality and scalability
Read More
Arrow Right

Lead Platform Manager

The Team Lead Platform Manager Integration is responsible for the delivery, stab...
Location
Location
United Kingdom , Birmingham
Salary
Salary:
64500.00 GBP / Year
welovesalt.com Logo
Salt
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Strong integration delivery and engineering skills covering enterprise scale system connectivity and API development
  • Ability to lead complex technology services and balance technical needs with supplier performance
  • Strong understanding of Azure integration tooling
  • Supplier and stakeholder management skills
  • Ability to lead technical teams and set direction across support and delivery
  • Strong knowledge of Azure integration services and native cloud components
  • Good understanding of ERP or major enterprise systems such as Oracle or P6 and how they integrate
  • Knowledge of integration security principles and data transfer risks
  • Knowledge of agile and waterfall delivery approaches
  • Proven experience delivering enterprise scale integrations in a senior or lead position
Job Responsibility
Job Responsibility
  • Own the design, delivery and performance of integration services across the organisation
  • Lead the support and stabilisation of existing integration platforms including point to point links, automated interfaces and API based services
  • Develop and implement an enterprise integration strategy for internal systems and external third parties, suppliers, and partners
  • Oversee Azure integration services including API Management, Logic Apps, Azure Monitor and other native cloud components
  • Lead internal teams and suppliers providing integration development, support and operational services
  • Define technical standards, security controls and design patterns for all integration work
  • Ensure integration services meet SLAs and KPIs and deliver improvements where needed
  • Lead the identification and resolution of integration related issues, risks and vulnerabilities
  • Support integration activity across programmes using agile or waterfall delivery depending on project needs
  • Promote a consistent and inclusive approach across all workstreams
  • Fulltime
Read More
Arrow Right

Application Manager

The Application Manager is responsible for taking ownership of SaaS application ...
Location
Location
Hungary , Budapest
Salary
Salary:
Not provided
https://www.citi.com/ Logo
Citi
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • 3-5 years of relevant experience
  • Experience in managing and implementing successful projects
  • Solid grasp of industry vulnerability ratings and classifications
  • Ability to take ownership and make technical decisions on a wide range of compliance and functional requirements
  • Skill in managing unexpected and urgent matters in a rapidly evolving environment
  • Experience with dependency management, change management, and audit/compliance requirements
  • Outstanding aptitude in task and deadline management
  • Demonstrated leadership skills, especially in circumstances when ‘leading without authority’ is required
  • Consistently demonstrates clear and concise written and verbal communication in English
  • Microsoft365 proficiency
Job Responsibility
Job Responsibility
  • Working with a team of Applications Development professionals to accomplish established goals and conduct personnel duties for team (e.g. performance evaluations, training and development, hiring and disciplinary actions) as well as act as an advisor or coach to mid-level developers and analysts
  • Leverage skills across multiple teams ensuring compliance with all Citi policies
  • Develop a sound familiarity with multiple information security domains and how they are implemented at Citi
  • Drive a wide range of tasks from scheduling vulnerability assessments and working with external parties to have all findings remediated, coordinating continuity of business testing, maintaining identity and access management best practices, and ensuring that AI/ML risk remains within Citi’s risk appetite
  • Utilize in-depth specialty knowledge of applications development to analyze complex problems/issues, provide evaluation of business processes, system processes, and industry standards, and make evaluative judgement
  • Contribute to planning, formulation of procedures, and process development, negotiating with external parties when necessary
  • Prioritize vulnerability remediation for internally hosted assets
  • Appropriately assess risk when business decisions are made, demonstrating particular consideration for the firm's reputation and safeguarding Citigroup, its clients and assets, by driving compliance with applicable laws, rules and regulations, adhering to Policy, applying sound ethical judgment regarding personal behavior, conduct and business practices, and escalating, managing and reporting control issues with transparency, as well as effectively supervise the activity of others and create accountability with those who fail to maintain these standards.
What we offer
What we offer
  • Global Benefits
  • We bring the best to our people. We put our employees first and provide the best-in-class benefits they need to be well, live well and save well.
  • Fulltime
Read More
Arrow Right

Application Security Tech Lead

The position is a cross-functional role that will be responsible for various App...
Location
Location
United Kingdom , London
Salary
Salary:
Not provided
https://www.citi.com/ Logo
Citi
Expiration Date
Until further notice
Flip Icon
Requirements
Requirements
  • Bachelor's Degree with 4 - 6 years' experience in web application development or application code review
  • Experience as a technical lead or manager
  • Knowledge of cloud computing concepts and DevOps tools (OpenShift, Kubernetes, Docker, Chef, etc)
  • Experience using or testing cloud platforms (AWS, Google, Azure, etc) and security in/of the cloud
  • Understanding of security, web-based and infrastructure vulnerabilities
  • Experience in source code management, build and deployment technologies such as RLM, Ueploy, Jenkins, Artifactory, Maven, GitHub, etc
  • Experience conducting vulnerability assessments and articulating security issues to technical and non-technical audience
  • Understanding of Snyk, Checkmarx, CDXGen, Dependency Track, Fortify, GitHub Advance Security, Sonatype or Black Duck platform is a plus
  • Knowledge of tools and processes used to expose common vulnerabilities and implement countermeasures
  • Excellent communication skills (written and verbal)
Job Responsibility
Job Responsibility
  • Establish/manage multiple security programs that support the security testing requirements at the bank
  • Forge and maintain strong working relationships with development functions/teams, product delivery teams, project management, third party management, enterprise architecture, audit teams, etc.
  • Participate in security and technology strategic planning to ensure identified risk governance is incorporated into the CISO enterprise strategy
  • In partnership with business sectors, run delegate action groups to provide recommendations to strengthen development processes and security testing
  • Appropriately assess risk and provide software security advice when business decisions are made
  • Interface with Application Security Program Team to oversee Program Projects and Initiatives and make strategic recommendations to senior manager on standards and policy changes
  • Fulltime
Read More
Arrow Right

Petroleum & Corporate Solutions Performance Specialist

We are looking for a Petroleum & Corporate Solutions Performance Specialist for ...
Location
Location
Qatar , Doha
Salary
Salary:
Not provided
lobelia.earth Logo
Lobellia
Expiration Date
July 31, 2027
Flip Icon
Requirements
Requirements
  • Bachelor's degree in Computer Science, Information Systems, or related field
  • 10+ years of experience in Oil and Gas industry
  • 5+ years of experience in application portfolio management or related role
  • Strong knowledge of license optimization tools and license management
  • Strong experience in petroleum & Corporate applications governance and performance management
  • Excellent leadership & communication skills, with the ability to communicate technical concepts to non-technical stakeholders
  • Intermediate skills in planning and coordination
  • Knowledge of IT governance and best practices related to application management
  • Ability to work in a fast-paced environment and manage multiple priorities
  • Excellent communication and interpersonal skills
Job Responsibility
Job Responsibility
  • Develops and maintains an understanding of the company's business processes and systems, and identifies opportunities to improve and optimize them
  • Manages the Petroleum & Corporate applications portfolio, including assessing the adoption of applications, and identifying opportunities for optimization and consolidation
  • Custodian of the Petroleum & Corporate Solutions application portfolio
  • Leads License Managers to drive portfolio optimization
  • Supports, optimizes and manages the Petroleum & Corporate application portfolio
  • Keeps the Petroleum & Corporate applications portfolio/CMDB up to date, by conducting regular reviews of the applications portfolio
  • Collaborate with the Petroleum & Corporate Solutions Leads (business partners) in defining and maintaining the applications portfolio strategy and roadmap
  • Monitors industry trends and best practices related to application portfolio management, and applies them to improve the company's application management practices
  • Runs regular license usage reviews, and provides recommendations of optimization opportunities
  • Tracks license (and contracts) expiry dates on a regular basis
What we offer
What we offer
  • Accommodation
  • Transport
  • Visa & Insurance
  • Fulltime
Read More
Arrow Right