Principal Consultant

Key Tasks & Responsibilities: 

• Lead, design, and enhance the global Vulnerability Management (VM) program, ensuring alignment with Daimler Truck cybersecurity objectives.

• Drive vulnerability management governance, including prioritization frameworks, SLAs, risk treatment approaches, and executive reporting.

• Oversee vulnerability detection, analysis, triage, and remediation workflows across cloud, on‑premise, and hybrid environments.

• Work closely with DT IT Operations, Infrastructure, Cloud, Application teams, and Location ISOs to ensure vulnerabilities are remediated efficiently.

• Collaborate with Security Architecture, SOC IR team, and Threat Intelligence teams to contextualize vulnerabilities based on real threat activity.

• Provide clear risk‑based recommendations to leadership by translating technical risk into business impact.

• Deliver executive‑ready dashboards, metrics, and vulnerability insights.

• Manage vendor engagements, platform enhancements, and product roadmap adoption.

• Own and drive continuous improvement of vulnerability scanning, assessment, reporting, and automation processes.

• Define and track KPIs such as exposure reduction, SLA adherence, critical vulnerability closure rates, and attack surface metrics.

Key Skills:

• Strong hands‑on experience with Microsoft Defender product suite including:

  • Microsoft Defender Vulnerability Management (MDVM)

  • Microsoft Defender for Endpoint (MDE)

  • Microsoft Defender for Cloud (MDC)

  • AWS Security Hub, Amazon GuardDuty

• Practical understanding of vulnerability scanning methodologies, CVE scoring (CVSS), exploitability assessments, and attack surface reduction.

• Familiarity with SIEM, SOAR, endpoint protection, and incident response processes.

• Experience in managing large‑scale security programs, stakeholder alignment, and leadership communication.

• Understanding of common attack vectors, misconfigurations, cloud‑native risks, and remediation techniques.

• Strong communication and interpersonal skills with the ability to influence

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or related field. Master’s degree preferred.

• 10–12+ years of experience in cybersecurity, with at least 5 years focused on vulnerability management and security platforms.

• Proven experience in managing enterprise‑wide security programs and working with Microsoft security technologies.