Job Posting Title
Manager Continuous Threat Exposure Management
Job Description Summary
Dauch is looking for a Manager, Continuous Threat Exposure Management to join our team. The Manager - Continuous Threat Exposure Management (CTEM) is essential to Dauch’s mission of secure business operations. This role entails identifying threats, managing vulnerabilities, and overseeing security testing programs. Responsibilities include leading vulnerability assessments, red/purple team exercises, and penetration testing services. Collaboration with IT, OT, product security, and vendors is crucial to mitigate risks while supporting business innovation and digital transformation.
Job Description:
Oversees and administers the Continuous Threat Exposure Management (CTEM) and Penetration Testing program throughout both enterprise and manufacturing environments.
Develops and implements strategic plans for detecting threats, identifying vulnerabilities, prioritizing risks, and mitigating them.
Supervises internal and external penetration tests, red teaming, and breach simulations.
Provides leadership and guidance for vulnerability lifecycle management, including scanning, analysis, remediation tracking, and executive reporting.
Partners with enterprise infrastructure and application teams to ensure vulnerabilities are understood and addressed according to risk.
Collaborates with manufacturing and OT teams to improve plant cyber security through vulnerability management testing.
Integrates threat intelligence into vulnerability prioritization processes and ensure alignment with MITRE ATT&CK and threat-informed defense frameworks.
Supports audit and compliance initiatives by maintaining documentation and evidence related to threat and vulnerability management.
Delivers cyber risk awareness and education for business stakeholders.
All other duties as assigned.
Required Skills and Education
Bachelor’s degree in Cybersecurity, Computer Science, Engineering, or a related field.
10+ years of progressive experience in cybersecurity, with at least 3 years in threat and vulnerability management and/or penetration testing.
Proven experience managing enterprise-scale vulnerability management tools (e.g., Tenable, Qualys, Rapid7) and penetration testing tools (e.g., Burp Suite, Metasploit, Cobalt Strike).
Familiarity with regulatory and industry frameworks such as NIST CSF, ISO 27001, NIST SP 800-115, MITRE ATT&CK, and OWASP Top 10.
Demonstrated ability to manage large-scale vulnerability programs across IT and OT environments.
Strong understanding of network protocols, operating systems, cloud security (AWS/Azure), and application security concepts.
Excellent leadership, communication, and stakeholder engagement skills.
Willingness and ability to travel as needed (up to approximately 20%).
Preferred Qualifications:
Experience working in or with large, global manufacturing organizations.
Relevant certifications such as OSCP, CISSP, GIAC GPEN, GWAPT, or CISM.
Experience with secure SDLC, DevSecOps, and vulnerability management in CI/CD pipelines.
Familiarity with industrial control systems (ICS) or OT cybersecurity (e.g., ISA/IEC 62443, NIST 800-82).
