What are the responsibilities and job description for the Manager - Vulnerability Management position at Advanced Micro Devices, Inc?
Overview:
AMD does not accept unsolicited resumes from headhunters, recruitment agencies, or fee-based recruitment services. AMD and its subsidiaries are equal opportunity, inclusive employers and will consider all applicants without regard to age, ancestry, color, marital status, medical condition, mental or physical disability, national origin, race, religion, political and/or third-party affiliation, sex, pregnancy, sexual orientation, gender identity, military or veteran status, or any other characteristic protected by law. We encourage applications from all qualified candidates and will accommodate applicants’ needs under the respective laws throughout all stages of the recruitment and selection process.
WHAT YOU DO AT AMD CHANGES EVERYTHING
We care deeply about transforming lives with AMD technology to enrich our industry, our communities, and the world. Our mission is to build great products that accelerate next-generation computing experiences – the building blocks for the data center, artificial intelligence, PCs, gaming and embedded. Underpinning our mission is the AMD culture. We push the limits of innovation to solve the world’s most important challenges. We strive for execution excellence while being direct, humble, collaborative, and inclusive of diverse perspectives.
AMD together we advance_
Responsibilities:
THE ROLE:
Lead the enterprise Vulnerability Management (VM) program with a strategic, risk-based approach. You’ll own the roadmap, governance, metrics, and executive reporting for vulnerability reduction across endpoints, servers, networks, and cloud infrastructure. This role partners closely with IT/Cloud/SOC teams to drive measurable risk reduction.
THE PERSON:
The ideal candidate will possess strong multi-tasking skills and passion for details, as well as thinking one step ahead of cyber-criminals. You should be well-prepared to thrive in a fast-paced environment, possessing good interpersonal, leadership and communication skills.
KEY RESPONSIBILITIES:
- Program Strategy & Roadmap
- Define and execute a multi-quarter VM strategy aligned to business risk, compliance needs, and threat landscape.
- Establish risk-based prioritization using CVSSv3 , EPSS, known-exploited catalogs, and business criticality.
- Maintain the VM governance model (SLAs, exception policy, standards, RACI)
- Coverage, Prioritization & Reduction
- Ensure complete and accurate asset coverage (on-prem, cloud, remote)
- Orchestrate risk-based remediation waves with Platform/Endpoint/Cloud teams; manage exception and comp-control paths.
- Drive configuration baseline adherence (e.g., CIS benchmarks) and coordinate compensating controls when patching isn’t feasible
- Tooling & Automation
- Own platform hygiene (sensors, tagging, scan schedules, dashboards)
- Partner with SOAR/SIEM teams to automate ticketing, notifications, and reporting pipelines
- Stakeholder Management & Reporting
- Run the cross-functional VM council; publish executive scorecards and board-level metrics.
- Communicate risk, tradeoffs, and timelines to technical and non-technical audiences; escalate blockers.
- Threat-Informed Operations
- Align remediation to current exploitation (KEV, vendor advisories) and internal detections from SOC/IR.
- Coordinate with IR for rapid response on zero-days and high-risk exposures.
PREFERRED EXPERIENCE:
- Vulnerability Management, Security Engineering, or related, with experience leading programs or teams.
- Hands-on experience with popular VM tools in the industry
- Strong grasp of asset inventory/linkage, CVSS/EPSS, KEV, patch orchestration, and exception governance.
- Proven experience building metrics and communicating to executives/boards.
- Familiarity with Windows/Linux, virtualization, cloud platforms
LOCATION:
Austin, TX
#LI-MF2
#LI-HYBRID
Qualifications:
Benefits offered are described: AMD benefits at a glance.
AMD does not accept unsolicited resumes from headhunters, recruitment agencies, or fee-based recruitment services. AMD and its subsidiaries are equal opportunity, inclusive employers and will consider all applicants without regard to age, ancestry, color, marital status, medical condition, mental or physical disability, national origin, race, religion, political and/or third-party affiliation, sex, pregnancy, sexual orientation, gender identity, military or veteran status, or any other characteristic protected by law. We encourage applications from all qualified candidates and will accommodate applicants’ needs under the respective laws throughout all stages of the recruitment and selection process.