{"id":1511557,"url":"https://alion.io/job/ryder-system-vulnerability-management-lead","title":"Vulnerability Management Lead","company":{"id":8229,"name":"Ryder System","domain":"ryder.com","url":"https://alion.io/company/ryder-system","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":88,"open_postings":43,"ghost_share":0,"stale_share":0.674,"repost_share":0,"time_to_fill_p50_days":20,"computed_at":"2026-10-12T06:55:09Z"}},"role":"Sales","role_family":"Sales","seniority":"lead","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Coral Gables, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":92000,"max_usd":217000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":817},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CVE","optional":false},{"name":"CVSS","optional":false},{"name":"CWE","optional":false},{"name":"GCP","optional":false},{"name":"HIPAA","optional":false},{"name":"Linux","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"Nessus","optional":false},{"name":"NIST CSF","optional":false},{"name":"OWASP","optional":false},{"name":"Qualys Cloud Platform","optional":false},{"name":"Tanium","optional":false},{"name":"TCP/IP","optional":false},{"name":"Telegram","optional":false},{"name":"WhatsApp","optional":false},{"name":"Windows","optional":false}],"status":"live","first_seen_at":"2026-09-30T08:09:44Z","employer_posted_date":"2026-09-30","last_verified_at":"2026-10-12T09:30:08Z","board_verified":true,"closed_at":null,"days_open":12,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":12},"description":"Job Seekers can review the Job Applicant Privacy Policy by clicking here.\nJob Description:\nSummary\nThe Vulnerability Management Lead will ensure continuous vulnerability lifecycle management within the Ryder environment including monitoring, collection, reporting, and assessment of impact for vulnerability related data from vendors and internal resources. This individual will be responsible for configuring vulnerability assessment tools, performing scans, analyzing vulnerabilities, identifying relevant threats, recommending corrective actions, and summarizing results for relevant operational teams. This individual will lead by forming strong partnerships with technical teams and provide vision, strategy, and prioritization to control vulnerabilities in the environment in a timely and effective manner.\nEssential Functions\nLeads the Proactive assessment and remediation of security vulnerabilities within applications and infrastructure software and/ or other Information assets.\n\nEstablishes strategies and frameworks for performing validation of scanning results. Performs asset and network discovery activities, helping ensure full coverage of vulnerability management environment.\n\nRecommend Fixes, Security Patches and other measures required in the event of a security breach. Reviews penetration test findings with system owners in line with vulnerability and asset risk ratings.\n\nDefine key performance indicators (KPIs) and metrics across business units to illustrate effectiveness with vulnerability management.\n\nImplement or coordinates remediation required by vulnerability scans, and audits, and documents exceptions as necessary.\n\nProduces vulnerability, configuration, and coverage metrics and reporting to demonstrate assessment coverage and remediation effectiveness\n\nGenerates reports on assessment findings and prioritizes remediation schedules\n\nMaintains Health and effectiveness of Application and device scanning applications and systems within the security.\n\nAdditional Responsibilities\nReviews security scans and leads/manages resolution of issues.\n\nEnsures compliance with all applicable configuration standards\n\nOversees enterprise vulnerability assessment and configuration assessment tools\n\nPeriodically attend and participate in change management policy discussions and meetings.\n\nRegularly research and learn new TTPs in public and closed forums, and work with colleagues to assess risk and implement/validate controls as necessary\n\nLeverage vulnerability database sources to understand each weakness, its probability and remediation options, including vendor-supplied fixes and workarounds.\n\nCommunicate vulnerability results in a manner understood by technical and non-technical business units based on risk tolerance and threat to the business, and gain support through influential messaging.\n\nWork closely with infrastructure teams to advise and support remediation efforts to close vulnerability exposure to new threats in the wild and verify the organization’s security posture against them.\n\nPerform other duties as assigned.\n\n Skills and Abilities\nStrong decision-making capabilities, with a proven ability to weigh the relative costs and benefits of potential actions and identify the most appropriate one\n\nAn ability to effectively influence others to modify their opinions, plans, or behaviors\n\nAn understanding of business needs and commitment to delivering high-quality, prompt, and efficient service to the business\n\nAn understanding of organizational mission, values, and goals and consistent application of this knowledge\n\nExcellent time management and organizational skills\n\nExcellent written and verbal communication skills, interpersonal and collaborative skills\n\nSkilled at recommending, implementing, and delivering security solutions based on analysis and business requirements\n\nAbility to obtain and maintain technical team and business support to influence a collaborative effort to reduce attack surface\n\nProven trustworthiness and history of acting with integrity, taking pride in work, seeking to excel, being curious and adaptable, and communicating well\n\nSelf-starter requiring minimal supervision\n\nTechnical expertise in system security vulnerabilities and remediation techniques, network and web-related protocols (e.g., TCP/IP, UDP, IPSEC, HTTP, etc.) advanced required\n\nTechnical expertise in security engineering, system and network security, authentication and security protocols, cryptography, and application security advanced required\n\nKnowledge of Microsoft Windows and Linux systems intermediate required\n\nBroad understanding of various IT risk and threat assessment methodologies intermediate required\n\nKnowledge with prioritizing remediation activities with operational teams through risk ratings of vulnerabilities and assets, intermediate required\n\nSound Knowledge of common infrastructure and web application vulnerabilities and common vulnerability categorizations such as CVE,CVSS,CWE intermediate required\n\nExperience with vulnerability management across Amazon Web Services (AWS), Microsoft Azure or Google Cloud Platform (GCP)intermediate preferred\n\nKnowledge of one or more compliance standards, including Payment Card Industry (PCI), Health Information Portability and Accountability Act (HIPAA), Gramm-Leach-Bliley Act (GLBA), National Institute of Standards (NIST) or International Standards Organization (ISO)advanced required\n\nProficient with vulnerability management solutions such as Qualys, Nexpose, Nessus, Kenna Security, Tanium and open source, intermediate required\n\nUnderstanding of OWASP, CVSS, the MITRE ATT&CK framework and the software development life cycle, intermediate required\n\nStrong Knowledge of technology and security topics including network security, wireless security, application security, infrastructure hardening, security baselines, and web server and database security, advanced required\n\n Qualifications\nBachelor's degree required Computer Science, Information Security, or related field or additional 4 years of required work experience\n\nFive (5) years or more experience in information security, especially in a vulnerability analysis role on a Computer Incident Response Team (CIRT), Computer Emergency Response Team (CERT), Computer Security Incident Response Center (CSIRC) or a Security Operations Center (SOC) required\n\nFive (5) years or more experience in deploying and operating vulnerability scanning infrastructure and services. required\n\nFive (5) years or more experience and direct working knowledge of Information Security control frameworks such as ISO/IEC 27001, NIST CSF, CobIT, etc. required\n\nTechnical expertise in system security vulnerabilities and remediation techniques, network and web-related protocols (e.g., TCP/IP, UDP, IPSEC, HTTP, etc.) advanced required\n\nTechnical expertise in security engineering, system and network security, authentication and security protocols, cryptography, and application security advanced required\n\nKnowledge of Microsoft Windows and Linux systems intermediate required\n\nBroad understanding of various IT risk and threat assessment methodologies intermediate required\n\nKnowledge with prioritizing remediation activities with operational teams through risk ratings of vulnerabilities and assets. intermediate required\n\nSound Knowledge of common infrastructure and web application vulnerabilities and common vulnerability categorizations such as CVE,CVSS,CWE intermediate required\n\nExperience with vulnerability management across Amazon Web Services (AWS), Microsoft Azure or Google Cloud Platform (GCP). intermediate preferred\n\nKnowledge of one or more compliance standards, including Payment Card Industry (PCI), Health Information Portability and Accountability Act (HIPAA), Gramm-Leach-Bliley Act (GLBA), National Institute of Standards (NIST) or International Standards Organization (ISO). advanced required\n\nProficient with vulnerability management solutions such as Qualys, Nexpose, Nessus, Kenna Security, Tanium and open source. intermediate required\n\nUnderstanding of OWASP, CVSS, the MITRE ATT&CK framework and the software development lifecycle. intermediate required\n\nStrong Knowledge of technology and security topics including network security, wireless security, application security, infrastructure hardening, security baselines, and web server and database security. advanced required\n\nInformation Risk, Privacy, or Security Certification (CISSP, CCSK, CCSP, PCSM, OSCP, CEH, GPEN)\n\nTravel\n1-10%\nDOT Regulated\nNo\nJob Category\nInformation SecurityOur Culture & Commitment:\nAt Ryder, you’re trusted to make an impact-while enjoying room to grow and having a voice that’s heard. Our culture is built on respect, collaboration, and shared pride in doing great work rooted in innovation and safety.\nYour Voice. Your Success. The Future We Build Together.\nCompensation Information:\nThe compensation offered to acandidate may be influenced by a variety of factors, including the candidate’s relevant experience; education, including relevant degrees or certifications; work location; market data/ranges; internal equity; internal salary ranges; etc. The position may also be eligible to receive an annual bonus, commission, and/or long-term incentive plan based on the level and/or type. Compensation rangesfor the position are below:\nPay Type:\nSalariedMinimum Pay Range:\nMaximum Pay Range:\nBenefits Information:\nFor all Full-time positions only: Ryder offers comprehensive health and welfare benefits, to include medical, prescription, dental, vision, life insurance and disability insurance options, as well as paid time off for vacation, illness, bereavement, family and parental leave, and a tax-advantaged 401(k) retirement savings plan.\nRyder is proud to be an Equal Opportunity Employer and Drug Free workplace.\nAll qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, sex, sexual orientation, gender identity, age, status as a protected veteran, among other things, or status as a qualified individual with disability.\nImportant Note:\nSome positions require additional screening that may include employment and education verification; motor vehicle records check and a road test; and/or badging or background requirements of the customer to which you are assigned.\nSecurity Notice for Applicants:\nRyder will only communicate with an applicant directly from a [@ryder.com] email address and will never conduct an interview online through a chat type forum, messaging app (such as WhatsApp or Telegram), or via an online questionnaire. During an interview, Ryder will never ask for any form of payment or banking details and will never solicit personal information outside of the formal submitted application through www.ryder.com/careers.\nShould you have any questions regarding the application process or to verify the legitimacy of an interview or Ryder representative, please contact Ryder at  or 800-793-3754.\nCurrent Employees:\nIf you are a current employee at Ryder, please click here to log in to Workday to apply using the internal application process.\nJob Seekers can review the Job Applicant Privacy Policy by clicking here.","description_format":"text","description_chars":11219,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Equity","Life insurance","Parental leave","Retirement plans"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Endpoint Security","Information Security","Vulnerability Management","Commerce"],"lifecycle":[{"event":"open","at":"2026-09-30T08:09:44Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 57 · green card filings: 18","filings_12m":57,"filings_prev_12m":54,"green_card_filings_12m":18,"median_offered_wage_usd":121567,"route":null,"cap_exempt":false,"checked_at":"2026-10-03T21:08:04+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":0}],"liveness":{"score":49,"band":"ok","label":"Likely open","p_open":1,"p_active":0.548,"p_room":0.9,"age_days":11,"expected_fill_days":20,"reasons":["conf:3","stale_co","velocity","win:mid","comp:brand"],"computed_at":"2026-10-12T06:55:09Z"},"pay":null,"html_url":"https://alion.io/job/ryder-system-vulnerability-management-lead","json_url":"https://alion.io/job/ryder-system-vulnerability-management-lead.json","meta":{"generated_at":"2026-10-12T12:20:08Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":19197,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-13T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":8229},"rest":"https://alion.io/mcp/rest/get_company?id=8229"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fryder-system-vulnerability-management-lead"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fryder-system-vulnerability-management-lead"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fryder-system-vulnerability-management-lead"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ryder-system-vulnerability-management-lead\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fryder-system-vulnerability-management-lead"}]}