Manager Continuous Threat Exposure Management
American Axle & Manufacturing Manager Continuous Threat Exposure Management
Job Posting Title
Manager Continuous Threat Exposure ManagementJob Description Summary
Dauch is looking for a Manager, Continuous Threat Exposure Management to join our team. The Manager - Continuous Threat Exposure Management (CTEM) is essential to Dauch’s mission of secure business operations. This role entails identifying threats, managing vulnerabilities, and overseeing security testing programs. Responsibilities include leading vulnerability assessments, red/purple team exercises, and penetration testing services. Collaboration with IT, OT, product security, and vendors is crucial to mitigate risks while supporting business innovation and digital transformation.Job Description:
Oversees and administers the Continuous Threat Exposure Management (CTEM) and Penetration Testing program throughout both enterprise and manufacturing environments.
Develops and implements strategic plans for detecting threats, identifying vulnerabilities, prioritizing risks, and mitigating them.
Supervises internal and external penetration tests, red teaming, and breach simulations.
Provides leadership and guidance for vulnerability lifecycle management, including scanning, analysis, remediation tracking, and executive reporting.
Partners with enterprise infrastructure and application teams to ensure vulnerabilities are understood and addressed according to risk.
Collaborates with manufacturing and OT teams to improve plant cyber security through vulnerability management testing.
Integrates threat intelligence into vulnerability prioritization processes and ensure alignment with MITRE ATT&CK and threat-informed defense frameworks.
Supports audit and compliance initiatives by maintaining documentation and evidence related to threat and vulnerability management.
Delivers cyber risk awareness and education for business stakeholders.
All other duties as assigned.
Required Skills and Education
Bachelor’s degree in Cybersecurity, Computer Science, Engineering, or a related field.
10+ years of progressive experience in cybersecurity, with at least 3 years in threat and vulnerability management and/or penetration testing.
Proven experience managing enterprise-scale vulnerability management tools (e.g., Tenable, Qualys, Rapid7) and penetration testing tools (e.g., Burp Suite, Metasploit, Cobalt Strike).
Familiarity with regulatory and industry frameworks such as NIST CSF, ISO 27001, NIST SP 800-115, MITRE ATT&CK, and OWASP Top 10.
Demonstrated ability to manage large-scale vulnerability programs across IT and OT environments.
Strong understanding of network protocols, operating systems, cloud security (AWS/Azure), and application security concepts.
Excellent leadership, communication, and stakeholder engagement skills.
Willingness and ability to travel as needed (up to approximately 20%).
Preferred Qualifications:
Experience working in or with large, global manufacturing organizations.
Relevant certifications such as OSCP, CISSP, GIAC GPEN, GWAPT, or CISM.
Experience with secure SDLC, DevSecOps, and vulnerability management in CI/CD pipelines.
Familiarity with industrial control systems (ICS) or OT cybersecurity (e.g., ISA/IEC 62443, NIST 800-82).
About Dauch:
Dauch Corporation is a premier Driveline and Metal Forming supplier serving the global automotive industry with a powertrain-agnostic product portfolio that supports electric, hybrid, and internal combustion vehicles. The company is headquartered in Detroit, MI, with operations that span 24 countries and more than 175 locations. Formed through the acquisition of Dowlais Group plc and its subsidiaries - GKN Automotive and GKN Powder Metallurgy, Dauch unites deep engineering roots with global manufacturing capabilities and an entrepreneurial spirit to move mobility forward. Visit www.dauch.com to learn more.
Dauch will not discriminate against any Associate or applicant for employment because of age, race, color, gender, religion, weight, height, marital status, sexual orientation, genetic history or information, gender identity or expression, disability, protected veteran status, national origin, or other characteristic protected by law. Dauch will take affirmative action to ensure that applicants are employed, and that Associates are treated equally during employment, without regard to their age, race, color, gender, religion, weight, height, marital status, sexual orientation, genetic history or information, gender identity or expression, disability, protected veteran status, national origin, or other characteristic protected by law. For the Disabled Job Seeker: We offer reasonable accommodations for qualified disabled individuals who are applicants for employment. To request assistance or accommodations, please e-mail TalentAcquisition@aam.com. Dauch is an equal opportunity/affirmative action employer.