Assoc Director Cybersecurity - Vulnerability Incident Prevention & Research

Job Description:

This position requires office presence of a minimum of 5 days per week and is only located in the location(s) posted. No relocation is offered.

Join AT&T and reimagine the communications and technologies that connect the world. Our Chief Security Office ensures that our assets are safeguarded through truthful transparency, enforce accountability and master cybersecurity to stay ahead of threats. Bring your bold ideas and fearless risk-taking to redefine connectivity and transform how the world shares stories and experiences that matter. When you step into a career with AT&T, you won’t just imagine the future-you’ll create it.

Job Summary:

We are seeking a highly skilled and experienced Associate Director of Vulnerability Management to join our Information Security team. The ideal candidate will have a strong background in application, database, and server technologies, as well as expertise in bug bounty management and cybersecurity event management. This role will be responsible for leading the vulnerability management team responsible for risk analysis of newly identified vulnerabilities, ensuring awareness from asset owner to senior leadership of those threats, and driving processes and practices that will reduce AT&T’s MTTR.

Key Responsibilities:

• Lead and manage the vulnerability management program, including the identification, assessment, and remediation of security vulnerabilities across applications, databases, and servers with a particular focus on EASM identified vulnerabilities.
• Develop and implement strategies to improve the overall security posture of the organization.
• Collaborate with cross-functional teams to ensure the timely resolution of identified vulnerabilities.
• Oversee the bug bounty program, including the coordination of vulnerability disclosures and the management of external security researchers.
• Manage cybersecurity events such as zero-day response, mitigation technique discovery and roll out and close collaboration with incident response teams to prevent exploitation of these newly identified threats.
• Stay current with the latest security trends, threats, and technologies to ensure the organization remains protected.
• Provide leadership and mentorship to the vulnerability management team.
• Develop and maintain security policies, procedures, and documentation.
• Communicate effectively with stakeholders, including executive leadership, to provide updates on the security posture and ongoing initiatives.

Qualifications:

• Bachelor’s degree in Computer Science, Information Security, or a related field. Advanced degree preferred.
• Minimum of 7 years of experience in vulnerability management, information security, or a related field.
• Strong knowledge of application, database, and server technologies.
• Experience with bug bounty programs and managing external security researchers.
• Proven experience in cybersecurity event management, including incident response and threat analysis.
• Relevant certifications such as CISSP, CISM, CEH, or equivalent.
• Excellent problem-solving and analytical skills.
• Strong communication and interpersonal skills.
• Ability to work effectively in a fast-paced, dynamic environment.

Preferred Skills:

• Experience with security tools such as Tenable, Nessus, Qualys, Burp Suite, and Metasploit.
• Knowledge of regulatory requirements and industry standards (e.g., GDPR, PCI-DSS, ISO 27001).
• Familiarity with cloud security and DevSecOps practices.

Supervisory:

Yes.

Our Assoc Director-Cybersecurity earns between $174,100.00-$261,100.00 USD Annual, not to mention all the other amazing rewards that working at AT&T offers. Individual starting salary within this range may depend on geography, experience, expertise, and education/training.

Joining our team comes with amazing perks and benefits:  

• Medical/Dental/Vision coverage
• 401(k) plan
• Tuition reimbursement program
• Paid Time Off and Holidays (based on date of hire, at least 23 days of vacation each year and 9 company-designated holidays)
• Paid Parental Leave
• Paid Caregiver Leave
• Additional sick leave beyond what state and local law require may be available but is unprotected.
• Adoption Reimbursement
• Disability Benefits (short term and long term)
• Life and Accidental Death Insurance
• Supplemental benefit programs: critical illness/accident hospital indemnity/group legal
• Employee Assistance Programs (EAP)
• Extensive employee wellness programs
• Employee discounts up to 50% off on eligible AT&am