Director of Vulnerability and Exploits
- Compensation
- Not disclosed
- Location
- Dallas, TX
- Work setup
- Not specified
- Seniority
- C level
- Employment
- Not specified
- Experience
- 3+ years
- Category
- Not specified
- Posted
Skills
Must have
- 8+ years of experience in vulnerability research, offensive security, or exploit development, with at least 3 years in a people management or team leadership role.
- Deep, hands-on technical expertise in vulnerability analysis and exploit research: reverse engineering, proof-of-concept development, and understanding root cause and exploitability rather than consum
- Strong command of vulnerability management at scale, including enterprise assessment platforms, CVSS and EPSS, KEV, and risk-based prioritization methodologies, with the judgment to know where those s
- Demonstrated ability to innovate: developing new risk-measurement models, prioritization frameworks, or research methods, not just operating an existing program.
- Experience securing large-scale infrastructure environments; familiarity with the vulnerability landscape of HPC, GPU clusters, high-speed interconnects, firmware, or AI workloads is a strong advantag
- Proven ability to build and lead high-performing technical teams, including hiring, mentoring, and developing practitioners across a range of seniority levels.
- Strong cross-functional collaboration skills, with a track record of working with infrastructure and engineering teams to drive remediation outcomes and embed secure-by-default practices.
- Experience defining and operating program metrics, SLAs, and executive reporting, with the ability to communicate risk posture clearly to technical and non-technical stakeholders.
- Familiarity with vulnerability disclosure standards, the CVE process, and coordinated disclosure practices, and the ability to navigate them responsibly.
- Analytical, structured, and inventive, able to run a broad program across many asset classes while retaining the technical depth to engage meaningfully with complex exploit research.
- Bachelor’s degree in Engineering, Computer Science, or a related field, or equivalent experience.
Full description
THE COMPANY
NorthMark Compute & Cloud (NMC²) is backed by dedicated leadership and investment, with a clear mission as it operates at the bleeding edge of technology. Its goal is to scale and enhance the high-performance computing (HPC) and cloud infrastructure that supports its clients’ research, production, and delivery, enabling breakthroughs that shape the industries of tomorrow. Its engineers build critical infrastructure to eliminate friction in scientific research, simulations, analysis, and decision-making, accelerating discovery and driving faster innovation.
THE POSITION
NMC² is seeking a Director of Vulnerability and Exploits to lead one of the most technically demanding functions in the security organization. Reporting to the VP of Security Operations, this leader owns the identification, analysis, and remediation of vulnerabilities across NMC²’s infrastructure, paired with an exploit research capability that keeps the company ahead of the threat landscape rather than reacting to it.
This is not a scan-and-ticket function, and we are not looking for someone to run a tool and file findings. We are looking for a research-minded technical leader who will build a program that genuinely understands how vulnerabilities and exploits impact production: what actually puts the platform at risk, how to measure that risk credibly, and how to prioritize maintenance against real exploitability and operational impact rather than raw severity scores. You will drive original research into NMC²’s own attack surface, reverse-engineer exploits to understand what defenders are truly facing, and develop new methods for risk measurement and remediation prioritization that improve on the industry-standard playbook.
You will build and run a team across two disciplines, vulnerability management and exploit research, setting technical direction and standards for both. You will own the full vulnerability lifecycle while directing a research effort that stress-tests NMC²’s most critical systems and feeds hard evidence back into how the platform is defended and maintained. The ideal candidate is a technical leader with deep hands-on expertise in vulnerability research and exploit analysis who has made the transition into building and developing high-performing teams. You understand the unique attack surfaces of HPC and AI-scale infrastructure, you bring a data-driven and inventive approach to risk, and you are as comfortable briefing the VP of Security Operations on program health as you are working a novel exploit chain alongside your team.
RESPONSIBILITIES
- Lead and grow a team of vulnerability and exploit specialists across both vulnerability management and exploit research, establishing clear ownership, technical standards, research direction, and development paths.
- Own the end-to-end vulnerability management program across NMC²’s full infrastructure footprint: asset coverage, continuous assessment, triage, risk-based prioritization, remediation tracking, and SLA enforcement.