The role involves building and leading programs to govern the responsible disclosure of software vulnerabilities discovered by AI-powered tools. The individual will manage the end-to-end lifecycle of vulnerability disclosure, including internal triage, human validation, and external coordination with vendors and open-source maintainers. Responsibilities include designing tiered disclosure timelines, developing submission models, and establishing program metrics to track health and performance. The position requires cross-functional collaboration with security, legal, communications, and product teams to ensure alignment with security policies. Additionally, the role involves communicating program vision and progress to senior leadership and executive teams.

Candidates must have at least 10 years of experience in cybersecurity, vulnerability management, or security operations, with a minimum of 4 years specifically leading vulnerability disclosure or coordinated response programs. A bachelor’s degree or an equivalent combination of education, training, and experience is required. Applicants should possess deep technical familiarity with vulnerability discovery tools and triage workflows, along with proven experience in cross-organizational program management. Strong executive communication skills and the ability to influence senior leadership are essential for this role.