Principal Consultant

Purpose of the Role:  Vulnerability Management Program Manager will be responsible for driving the global vulnerability management strategy, overseeing end to end vulnerability lifecycle processes, and ensuring timely remediation actions across DT enterprise environments.  This role requires deep expertise in the Microsoft Defender product suite (including Defender for Endpoint, Defender Vulnerability Management, Defender for Cloud) combined with strong program management skills to operate and mature the vulnerability management function.

Key Tasks & Responsibilities: Lead, design, and enhance the global Vulnerability Management (VM) program, ensuring alignment with Daimler Truck cybersecurity objectives.

Drive vulnerability management governance, including prioritization frameworks, SLAs, risk treatment approaches, and executive reporting.

Oversee vulnerability detection, analysis, triage, and remediation workflows across cloud, on‑premise, and hybrid environments.

Work closely with DT IT Operations, Infrastructure, Cloud, Application teams, and Location ISOs to ensure vulnerabilities are remediated efficiently.

Collaborate with Security Architecture, SOC IR team, and Threat Intelligence teams to contextualize vulnerabilities based on real threat activity.

Provide clear risk‑based recommendations to leadership by translating technical risk into business impact.

Deliver executive‑ready dashboards, metrics, and vulnerability insights.

Manage vendor engagements, platform enhancements, and product roadmap adoption.

Own and drive continuous improvement of vulnerability scanning, assessment, reporting, and automation processes.

Define and track KPIs such as exposure reduction, SLA adherence, critical vulnerability closure rates, and attack surface metrics.

Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or related field. Master’s degree preferred.

10–12+ years of experience in cybersecurity, with at least 5 years focused on vulnerability management and security platforms.

Proven experience in managing enterprise‑wide security programs and working with Microsoft security technologies.

Key Skills: Strong hands‑on experience with Microsoft Defender product suite including: Microsoft Defender Vulnerability Management (MDVM)

Microsoft Defender for Endpoint (MDE)

Microsoft Defender for Cloud (MDC)

AWS Security Hub, Amazon GuardDuty

Practical understanding of vulnerability scanning methodologies, CVE scoring (CVSS), exploitability assessments, and attack surface reduction.

Familiarity with SIEM, SOAR, endpoint protection, and incident response processes.

Experience in managing large‑scale security programs, stakeholder alignment, and leadership communication.

Understanding of common attack vectors, misconfigurations, cloud‑native risks, and remediation techniques.

Strong communication and interpersonal skills with the ability to influence