Cyber - AI-Enabled Vulnerability Management - Senior - Consulting

Location: Anywhere in Country

At EY, we’re all in to shape your future with confidence.

We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go. Join EY and help to build a better working world.

The Opportunity

Clients across every industry look to us for trusted solutions to increasingly complex threats. As a Senior in AI-Enabled Vulnerability Management, you’ll help them move from scan-and-patch cycles to continuous threat exposure management (CTEM) — applying AI across the vulnerability lifecycle and building the automation that makes it repeatable. You’ll also help clients extend their programs to cover the AI systems they’re adopting.

Your key responsibilities

As a Senior on the Vulnerability Management team, you would:

• Design and operate AI-enabled vulnerability and exposure management capabilities across cloud, on-premises, container, application, and endpoint environments.

• Build the asset data foundation the program depends on — identity resolution, CMDB reconciliation, and deduplication across overlapping scanner coverage.

• Drive risk-based prioritization using threat intelligence, exploit prediction, known-exploited-vulnerability data, reachability, and business criticality.

• Build and tune AI and agentic workflows that triage findings, generate remediation guidance, and drive closure through orchestrated patching, IaC, and validated fixes.

• Measure what the AI produces — benchmarking triage against human baselines and tracking false-positive reduction and time-to-remediate.

• Apply guardrails, human-in-the-loop thresholds, and auditability to AI-generated actions in client environments.

• Help clients extend vulnerability management to their AI systems, covering model, prompt, integration, and supply chain weaknesses.

• Mentor junior team members and contribute reusable accelerators that outlast a single engagement.

Skills and attributes for success

You’ll need a blend of technical and business skills, along with the judgment to navigate complex problems and make informed decisions.

• Human-forward skills — empathy, curiosity, adaptability, and clear communication.
• Advanced problem-solving and critical thinking.
• Sound judgment in validating AI output, including spotting false positives and unsupported findings.
• A builder’s instinct — a preference for creating something reusable over configuring a tool once.
• Digital and learning agility in adopting new AI tooling.
• A platform-agnostic mindset, evaluating tooling based on client need rather than a single vendor stack.

To qualify for the role, you must have:

• 3-5 years of relevant experience in vulnerability or exposure management. No bachelor’s degree required.
• Hands-on experience across the full VM lifecycle — discovery, data quality, prioritization, remediation tracking, validation, and reporting — using platforms such as Tenable, Qualys, Rapid7, Wiz, Microsoft Defender, or equivalent.
• Experience applying risk-based prioritization using severity scoring, exploit prediction, threat context, and asset criticality.
• Demonstrated aptitude for applying AI or machine learning to vulnerability management — in production, through experimentation, or via adjacent automation work — with scripting and API integration proficiency (Python, PowerShell, or similar).
• A relevant certification in AI security, vulnerability management, or cybersecurity, or the ability to acquire one after employment.

Ideally, you’ll also have

• Production experience using AI to reduce vulnerability noise at scale.
• Experience benchmarking or evaluating AI-assisted security workflows.
• Experience with automated remediation — patch orchestration, IaC fixes, or pull-request-generated fixes with rollback.
• Experience assessing or securing AI and machine learning systems.
• Strong written and verbal communication, including translating technical detail for non-technical audiences.
• Experience defining VM metrics, KPIs, and executive dashboards that demonstrate risk reduction.
• Familiarity with consulting delivery methods and current cybersecurity trends.

What we look for

We seek top performers with a passion for cybersecurity and a proven track record of success. Ideal candidates are those who demonstrate agility, critical thinking, and the ability to work collaboratively in a dynamic environment — and who are energized by using AI to solve vulnerability management problems at scale.

We encourage you to apply, even if you do not meet every qualification.

What we offer you
At EY, we harness our collective strength to empower you to shape your future with confidence through professional growth, personal fulfillment and an inclusive culture. Learn more at ey.com/us/careers.

• The salary range for this job is:
  • New York City, Boston, and Washington DC Metro Areas, Washington State, and Southern California offices – $125,800 to $209,700
  • Bay Area California offices – $131,100 to $218,500
  • All other offices locations in the US, including Sacramento – $104,800 to $192,200
• Individual salaries within these ranges are determined through a wide variety of factors including but not limited to education, experience, knowledge, skills and geography. In addition, our Total Rewards package includes medical and dental coverage, pension and 401(k) plans, and a wide range of paid time off options.

Are you ready to shape your future with confidence? Apply today.

• To make the most of your application experience, please limit yourself to two applications within a six-month period.
• EY accepts applications for this position on an on-going basis.
• For those living in California, please click here for additional information.
• At EY, our values set the foundation for how we work and the behaviors we expect of our people. Any misrepresentation or falsification of information or lack of integrity at any point in the recruiting process may result in withdrawal of your candidacy, revocation of an offer or immediate termination of employment.

EY | Building a better working world

EY is building a better working world by creating new value for clients, people, society and the planet, while building trust in capital markets.

Enabled by data, AI and advanced technology, EY teams help clients shape the future with confidence and develop answers for the most pressing issues of today and tomorrow.

EY teams work across a full spectrum of services in assurance, consulting, tax, strategy and transactions. Fueled by sector insights, a globally connected, multi-disciplinary network and diverse ecosystem partners, EY teams can provide services in more than 150 countries and territories.

All in to shape the future with confidence.

EY provides equal employment opportunities to applicants and employees without regard to race, color, religion, age, sex, sexual orientation, gender identity/expression, pregnancy, genetic information, national origin, protected veteran status, disability status, or any other legally protected basis, including arrest and conviction records, in accordance with applicable law.

EY is committed to providing reasonable accommodation to qualified individuals with disabilities including veterans with disabilities. If you have a disability and either need assistance applying online or need to request an accommodation during any part of the application process, please call 1-800-EY-HELP3, select Option 2 for candidate related inquiries, then select Option 1 for candidate queries and finally select Option 2 for candidates with an inquiry which will route you to EY’s Talent Shared Services Team (TSS) or email the TSS at View email address on click.appcast.io.