DXC Technology · 4 hours ago
Manager for Total Vulnerability Management (TVM)
DXC Technology is a leading global technology services company. The Manager for Total Vulnerability Management (TVM) will lead efforts to identify, assess, prioritize, and remediate security vulnerabilities across data center and cloud environments, while developing a comprehensive vulnerability management strategy that aligns with organizational policies and regulatory requirements.
AnalyticsConsultingInformation TechnologyInsurTechOutsourcingSecuritySoftware Engineering
Responsibilities
Identifying, assessing, prioritizing, and remediating security vulnerabilities across all data center and cloud hosted environments
Developing and executing a comprehensive vulnerability management strategy that aligns with the organization’s risk appetite, policies, standards, and regulatory requirements
Overseeing the full lifecycle of vulnerability and patch management including asset and vulnerability discovery, patching, mitigation, and remediation prioritization
Metric reporting to executive leadership and responding to internal and external audits
Partnering closely with infrastructure, application, and delivery teams to ensure timely remediation
Driving continuous improvement of processes, tooling, and automation to reduce the organization’s attack surface
Qualification
Required
Minimum of 5–8 years of professional security experience, with at least 3 years focused on vulnerability management
Hands-on experience with vulnerability scanning tools (e.g., Tenable, Qualys, Rapid7, Wiz, Prisma Cloud)
Strong understanding of cloud environments (AWS, Azure, GCP) and SaaS-specific security concerns
Experience managing vulnerabilities across containers and serverless architectures
Familiarity with application security testing (SAST, DAST, penetration testing coordination)
Proficiency with threat intelligence sources and mapping vulnerabilities to real-world risk
Knowledge of patch management processes and integration with IT/DevOps workflows (CI/CD)
Understanding of network security fundamentals, including firewalls, IDS/IPS, and endpoint security
Proven ability to work with cross-functional teams (engineering, DevOps, compliance, product) to drive remediation
Familiarity with regulatory and compliance frameworks (SOC 2, ISO 27001, HIPAA, GDPR)
Strong background in risk assessment and prioritization, translating technical findings into business impact
Experience in developing and reporting metrics and KPIs for vulnerability management
Familiarity with automation and scripting (Python, PowerShell, Bash) to streamline vulnerability workflows
Knowledge of NIST, MITRE ATT&CK, CVSS scoring, and industry standards for vulnerability classification
Demonstrated ability to manage a team of security professionals
Excellent communication and presentation skills for executive-level reporting
Preferred
CISSP, CISM, CISA, OSCP, or GIAC certifications (e.g., GSEC, GCIH, GMON) demonstrating advanced security expertise
Background in DevSecOps practices and embedding vulnerability management into CI/CD pipelines
Experience with infrastructure-as-code (IaC) scanning (Terraform, CloudFormation)
Familiarity with software composition analysis (SCA) tools for open-source dependency management
Knowledge of zero-trust security principles and modern enterprise architecture security
Exposure to forensics and reverse engineering for advanced vulnerability analysis
Experience working in a SaaS company
Strong knowledge of emerging security trends, such as AI-driven threats and supply chain security
Benefits
Health, dental, and vision insurance coverage
Employee wellness
Life and disability insurance
A retirement savings plan
Paid holidays
Paid time off
Company
DXC Technology
DXC Technology is an IT and consulting services company that offers insurance software, security, and application development services.
H1B Sponsorship
DXC Technology has a track record of offering H1B sponsorships. Please note that this does not
guarantee sponsorship for this specific role. Below presents additional info for your
reference. (Data Powered by US Department of Labor)
Distribution of Different Job Fields Receiving Sponsorship
Represents job field similar to this job
Trends of Total Sponsorships
2025 (51)
2024 (78)
2023 (175)
2022 (146)
2021 (123)
2020 (183)
Funding
Current Stage
Public CompanyTotal Funding
$755.01M2025-12-02Post Ipo Debt· $755.01M
2017-04-03IPO
Leadership Team
Recent News
Best ERP Software, Vendors, News and Reviews
2026-01-11
2026-01-08
2026-01-07
Company data provided by crunchbase