Vulnerability Management Lead

About Millennium

Millennium is a global, diversified alternative investment firm, founded in 1989. Defined by evolution, innovation and focus, Millennium’s mission is to deliver results for our investors.

Our people are empowered with both independence and support: the autonomy to pursue ideas with conviction and the backing of a global network committed to collaboration, disciplined risk management and continuous learning. With opportunities to deepen expertise and accelerate development, talent at Millennium is equipped to adapt, evolve and build lasting impact over time. Discover how transformative growth accelerates impact.

Meet the Team

Millennium’s Information Technology organization supports the firm’s active, multi-manager business model through flexible, scalable technology and advanced proprietary systems. Within Infrastructure, Information Security protects the firm’s people, data, and technology across a complex global trading environment. The team combines technical expertise with pragmatic risk management and applies AI to strengthen defenses. Its Vulnerability Management team partners with technology and business stakeholders to identify, prioritize, and drive remediation of vulnerabilities across infrastructure and applications.

What You'll Do • Operate vulnerability discovery and assessment tools across infrastructure, cloud, and application environments

• Prioritize vulnerabilities based on risk, exploitability, and business context, partnering with asset owners to track remediation through closure
• Apply cyber threat intelligence—including active exploitation, threat actor targeting, and emerging tactics, techniques, and procedures—to strengthen prioritization and risk scoring
• Develop mitigation strategies for vulnerabilities that cannot be patched immediately, including compensating controls, virtual patching, and automated remediation workflows
• Use AI-driven prioritization and automation to scale assessment coverage and improve remediation processes
• Produce clear vulnerability metrics and reporting for technology and security leadership
• Support penetration testing and red team engagements, coordinating remediation follow-up
• Continuously improve discovery coverage and reduce time to remediate across the environment

What You Bring

• Experience operating vulnerability discovery and assessment tools; five or more years of hands-on vulnerability management experience with meaningful exposure to cyber threat intelligence is preferred
• Understanding of vulnerability scoring and prioritization frameworks, with experience applying MITRE ATT&CK, threat actor techniques, and exploit or CVE feeds to prioritize vulnerabilities
• Ability to design and implement mitigation and remediation approaches when patching is not immediately feasible
• Experience tracking remediation across distributed asset owners and building effective relationships across technology and the business
• Strong communication skills, with the ability to explain technical risk clearly to technical and nontechnical stakeholders; experience engaging senior executives is preferred
• Hands-on experience across on-premises and cloud infrastructure, Windows, Linux, macOS, containers, and scripting with Python, PowerShell, Bash, or similar languages is preferred
• Experience with the secure use, deployment, and governance of AI models, tools, and frameworks, and the ability to work independently in a fast-paced environment, are preferred
• A bachelor’s degree or higher in Computer Science, Computer Engineering, Cybersecurity, Information Security, or a related field—or equivalent work experience—is preferred, as are relevant certifications such as GPEN, OSCP, GCTI, or CISSP and experience in financial services or another highly regulated industry