Technical Program Manager, Security Vulnerability Management

Own the end-to-end Security Vulnerability Program across cloud infrastructure, applications, and runtime environments. 

Coordinate identification, prioritization, tracking, remediation, validation, and reporting of vulnerabilities from multiple security sources, including Cloud Security Posture Management (CSPM), Operating System and Runtime vulnerabilities, Static Application Security Testing (SAST), and Software Composition Analysis (SCA). 

Partner with Engineering and Security Engineering to establish vulnerability remediation priorities based on risk and business impact. Define and manage dependencies on external teams to improve security posture by getting alignment on commitments. 

Track vulnerability remediation SLAs and provide executive-level reporting on vulnerability trends and program health.  

Drive continuous improvements to vulnerability management processes and tooling. 

Participate in discussions around vulnerability severity, remediation approaches, and security architecture. 

Manage the Bug Bounty Program from intake through remediation and disclosure. Manage the bug bounty tool and vendor relationship. 

Measure and improve upon the Bug Bounty Program effectiveness through metrics and process changes. 

Manage third-party penetration testing engagements from planning through remediation. Manage vendor relationships, scheduling, deliverables, and quality expectations. Review and translate penetration test findings into actionable engineering work items. 

Represent the Security organization on customer calls and talk about the Outreach platform and security procedures. 

Lead cross-functional security programs and initiatives across Product, Engineering, Privacy, Legal, and Security. 

Partner with Governance, Risk, and Compliance (GRC) team to provide evidence to auditors that demonstrate efficacy of security controls. 

5+ years of cybersecurity experience in a Technical Program Manager in a fast-paced, SaaS software company. 

Basic understanding of cybersecurity principles, including Network Security, Cloud Security (AWS, Azure, or GCP), and Application Security. 

Possess vulnerability expertise and the drive to learn the Outreach platform to be able to have technical conversations with engineering 

Experience managing technical security programs, such as Security Vulnerability Program, Bug Bounty Program, and Security Exceptions Program 

Familiar with security vulnerability tooling and system integrations. 

Can successfully prioritize work resulting from security findings, stakeholder requests, and strategic vision. 

Proactively identify, assess, and manage security risks across projects and systems. 

Experience managing external security vendors and third-party engagements. 

An interest in emerging AI technologies and AI security is highly desirable as we continue to evolve our platform and security capabilities. 

Familiarity with security frameworks (e.g., NIST, ISO 27001, SOC 2) 

Excellent communication, organizational, and leadership skills