Principal Consultant

Key Tasks & Responsibilities:
-
Lead, design, and enhance the global Vulnerability Management (VM) program, ensuring alignment with Daimler Truck cybersecurity objectives.
-
Drive vulnerability management governance, including prioritization frameworks, SLAs, risk treatment approaches, and executive reporting.
-
Oversee vulnerability detection, analysis, triage, and remediation workflows across cloud, on‑premise, and hybrid environments.
-
Work closely with DT IT Operations, Infrastructure, Cloud, Application teams, and Location ISOs to ensure vulnerabilities are remediated efficiently.
-
Collaborate with Security Architecture, SOC IR team, and Threat Intelligence teams to contextualize vulnerabilities based on real threat activity.
-
Provide clear risk‑based recommendations to leadership by translating technical risk into business impact.
-
Deliver executive‑ready dashboards, metrics, and vulnerability insights.
-
Manage vendor engagements, platform enhancements, and product roadmap adoption.
-
Own and drive continuous improvement of vulnerability scanning, assessment, reporting, and automation processes.
-
Define and track KPIs such as exposure reduction, SLA adherence, critical vulnerability closure rates, and attack surface metrics.
Key Skills:
-
Strong hands‑on experience with Microsoft Defender product suite including:
-
Microsoft Defender Vulnerability Management (MDVM)
-
Microsoft Defender for Endpoint (MDE)
-
Microsoft Defender for Cloud (MDC)
-
AWS Security Hub, Amazon GuardDuty
-
Practical understanding of vulnerability scanning methodologies, CVE scoring (CVSS), exploitability assessments, and attack surface reduction.
-
Familiarity with SIEM, SOAR, endpoint protection, and incident response processes.
-
Experience in managing large‑scale security programs, stakeholder alignment, and leadership communication.
-
Understanding of common attack vectors, misconfigurations, cloud‑native risks, and remediation techniques.
-
Strong communication and interpersonal skills with the ability to influence
-
Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or related field. Master’s degree preferred.
-
10–12+ years of experience in cybersecurity, with at least 5 years focused on vulnerability management and security platforms.
-
Proven experience in managing enterprise‑wide security programs and working with Microsoft security technologies.