Skillenai

vulnerability management jobs in 2026 — demand, top roles hiring, and related skills

As of 2026-11-05, vulnerability management appears in 3,149 job postings indexed by Skillenai over the past 90 days — Security Engineer has the most postings mentioning vulnerability management, with demand share up 9.0% vs the prior 4 weeks.

Last updated · 90d ending 2026-11-05

Postings · last 90 days
3,149
Demand vs prior month
up 9.0% vs the prior 4 weeks
Top role · 18.5% of skill postings
Security Engineer
Top hiring metro
New York City

Which roles want vulnerability management?

Upload your resume and Skillenai will show which roles your vulnerability management experience fits, which skills you already cover, and what is missing.

See which roles your vulnerability management experience fits →No account needed.

Frequently asked questions about vulnerability management

+Is vulnerability management in demand in 2026?

Yes. vulnerability management appears in 3,149 job postings indexed by Skillenai over the 90 days ending 2026-11-05. Security Engineer accounts for the most postings mentioning vulnerability management (18.5% of all postings mentioning vulnerability management).

+What jobs require vulnerability management?

According to the Skillenai jobs index over the 90 days ending 2026-11-05, among roles with at least 20 postings, the highest shares mentioning vulnerability management are Vulnerability Management Engineer (42.9% of that role’s postings mention vulnerability management), Information Security Director (41.3% of that role’s postings mention vulnerability management), Cybersecurity Advisor (35.7% of that role’s postings mention vulnerability management).

+What skills are commonly paired with vulnerability management?

Across job postings indexed by Skillenai (90 days ending 2026-11-05), vulnerability management most often appears alongside incident response, AWS, Python, SIEM, threat modeling.

+Where is vulnerability management most in demand?

As of 2026-11-05, the metro areas posting the most jobs requiring vulnerability management are New York City, San Francisco, Bengaluru, London, Boston, according to the Skillenai jobs index.

+How can I keep up with new vulnerability management content and jobs?

Skillenai indexes news, blog posts, and research papers mentioning vulnerability management alongside the jobs index. You can subscribe to a daily email digest of new vulnerability management content from your Skillenai account.

+Which skills come before and after vulnerability management?

The skill-flow chart shows skills documented in adjacent positions across observed employer changes. An outgoing skill is documented in the following position but not the preceding one. These are ideas to explore, not proven prerequisites, acquisition dates, or levels of mastery. Each ribbon counts employer moves with that skill pair; one move can contribute several pairs.

Weekly indexed postings requiring vulnerability management — last 90 days

Salary distribution

Box = 25th–75th percentile · tick = median · whisker = 10th–90th · USD, annualized

Career paths around vulnerability management

Skills documented before and after this skill across employer changes.

Historical career profiles · all locations

Skills before vulnerability management

Before vulnerability managementPenetration Testing → vulnerability management: 8 observed employer moves with this skill pairNIST → vulnerability management: 7 observed employer moves with this skill pairAWS → vulnerability management: 7 observed employer moves with this skill pairAzure → vulnerability management: 6 observed employer moves with this skill pairincident response → vulnerability management: 6 observed employer moves with this skill pairSplunk → vulnerability management: 6 observed employer moves with this skill pairpython → vulnerability management: 5 observed employer moves with this skill pairHIPAA → vulnerability management: 5 observed employer moves with this skill pairvulnerabilitymanagementPenetration Testing: 8 movesPenetrationTesting8 movesNIST: 7 movesNIST7 movesAWS: 7 movesAWS7 movesAzure: 6 movesAzure6 movesincident response: 6 movesincident response6 movesSplunk: 6 movesSplunk6 movespython: 5 movespython5 movesHIPAA: 5 movesHIPAA5 moves

Skills after vulnerability management

After vulnerability managementvulnerability management → SIEM: 6 observed employer moves with this skill pairvulnerability management → incident response: 6 observed employer moves with this skill pairvulnerability management → Compliance: 5 observed employer moves with this skill pairvulnerability management → SOC 2: 4 observed employer moves with this skill pairvulnerability management → HITRUST: 4 observed employer moves with this skill pairvulnerability management → NIST: 4 observed employer moves with this skill pairvulnerability management → Security Awareness Training: 4 observed employer moves with this skill pairvulnerability management → Nessus: 4 observed employer moves with this skill pairvulnerabilitymanagementSIEM: 6 movesSIEM6 movesincident response: 6 movesincident response6 movesCompliance: 5 movesCompliance5 movesSOC 2: 4 movesSOC 24 movesHITRUST: 4 movesHITRUST4 movesNIST: 4 movesNIST4 movesSecurity Awareness Training: 4 movesSecurity AwarenessTraining4 movesNessus: 4 movesNessus4 moves
How to read this chart · view counts

Each side is an independent set of observed employer moves, not the same people followed through three stages. Ribbon widths compare move counts within that side. Internal moves are not included.

The following position documents a skill that the preceding position does not. Skills must be linked to both positions, with clear dates and no overlap. One move can connect several skill pairs. These patterns suggest skills to explore; they do not establish prerequisites, when a skill was learned, or a higher skill level.

Source: Skillenai talent graph, historical career profiles. Historical descriptions and coverage can change. Only the leading published connections are shown.

Observed connections and move counts
ConnectionMoves
Before: Penetration Testing8
Before: NIST7
Before: AWS7
Before: Azure6
Before: incident response6
Before: Splunk6
Before: python5
Before: HIPAA5
After: SIEM6
After: incident response6
After: Compliance5
After: SOC 24
After: HITRUST4
After: NIST4
After: Security Awareness Training4
After: Nessus4

Roles most likely to require vulnerability management

Among roles with at least 20 postings in the same period.

RolePostings mentioning skill% of role postings mentioning skill
Vulnerability Management Engineer1242.9%
Information Security Director1941.3%
Cybersecurity Advisor1035.7%
Cybersecurity Director1234.3%
Security Operations Manager733.3%
Information Security Manager3832.5%
Business Information Security Officer1032.3%
Head of Information Security832.0%
IT Security Engineer1630.8%
GRC Engineer729.2%

Roles with the most vulnerability management postings

RolePostings mentioning skillShare of skill postings
Security Engineer58218.5%
Application Security Engineer1324.2%
Cybersecurity Engineer1163.7%
Software Engineer1043.3%
Product Security Engineer842.7%
Security Analyst822.6%
Cybersecurity Analyst662.1%
DevSecOps Engineer642.0%
Information Security Engineer622.0%
Information Security Analyst591.9%

Top companies posting jobs requiring vulnerability management

Employers ranked by indexed job postings in the last 90 days.

Top companies posting jobs requiring vulnerability management
CompanyPostings · 90 days
Cisco47
Samsara27
Kyndryl19
CACI17
Mastercard17
Eurofins15
Veeam14
Accenture Federal Services14
General Motors14
State Street14

Job postings indexed over the past 90 days, grouped by resolved employer. Counts are postings, not hires. Companies without a published page appear without a link.

Top metros hiring for vulnerability management

NamePostingsShare
New York City1003.2%
San Francisco963.0%
Bengaluru722.3%
London591.9%
Boston371.2%
Washington331.0%
Chicago270.9%
Hyderabad260.8%
Seattle250.8%

Skills commonly paired with vulnerability management

incident response (1,064)AWS (723)Python (718)SIEM (674)threat modeling (673)penetration testing (595)CI/CD (583)Application security (554)Cloud Security (553)SAST (390)

Explore related pages

How this was computed

Weekly job-count charts omit the incomplete current week (weeks start Monday, UTC). Totals include all postings in the stated window. Counts derive from the Skillenai jobs index over the 90 days ending 2026-11-05. Skills are resolved against the Skillenai canonical taxonomy, so the same entity is counted whether a posting writes 'Python', 'Python 3', or 'python'. Role prevalence divides postings mentioning vulnerability management by all postings for each role in the same window, ranking roles with at least 20 postings. Role distribution divides each role’s vulnerability management postings by all vulnerability management postings, including postings without a role. Shares need not sum to 100% for the displayed roles. Pages refresh weekly (or daily for the top-50 most-requested skills). Adjusted posting share: 0.9% to 1.0%. Demand share change is the relative percentage change between these adjusted shares. Each employer-and-ATS group has at least 10 postings in each 90-day window; its earlier posting count supplies the same weight in both windows. The panel includes 2,472 identified employers and covers 71% of earlier and 70% of latest indexed postings. Windows: 2026-07-07 to 2026-10-05 and 2026-08-04 to 2026-11-02 (UTC; end dates excluded). The windows overlap by 62 days. Dates reflect indexing, not the employer’s posting date. This measures posting mix, not total hiring or market-wide demand. Matching excludes entrants and exits; changes in crawl completeness within an employer or ATS can still affect the result.

source
Skillenai jobs index, deduplicated daily
entity_id
032f6d04591905e0
data_as_of
2026-11-05
window_days
90
Compiled by Jared Rand · Data sourced from the Skillenai labor market index