IT Security Vulnerability and Patch Management Architect is a senior, high-visibility role within the Global IT Risk & Security team, responsible for advancing and standardizing vulnerability management across a large, global IT and OT environment. The role acts as the product owner for the Rapid7 platform, driving strategy, architecture, optimization, and lifecycle management while supporting visibility and risk reduction across roughly 90,000 assets. This position partners closely with infrastructure, manufacturing IT, engineering, and plant-level teams to influence remediation outcomes, mature best practices, and address complex challenges such as legacy systems and uptime-critical environments. Blending deep technical expertise with leadership through influence, the architect serves as a trusted advisor, helps modernize reporting and processes, and enables the organization to measurably reduce enterprise security risk.
Why This Role Matters
- Reduces enterprise cyber risk at scale: Owns and advances vulnerability and patch management across a large global IT and OT footprint, directly improving risk visibility, prioritization, and remediation effectiveness.
- Drives transformation and consistency: Leads the maturation and standardization of vulnerability management practices, modernizing platforms, reporting, and processes to enable better operational and strategic decision-making.
- Influences outcomes across complex environments: Partners with infrastructure, manufacturing IT, engineering, and plant teams to overcome legacy system and uptime constraints, driving remediation progress without direct authority.
- Provides strategic technical leadership: Combines hands-on expertise with leadership through influence, serving as a trusted advisor, mentoring team members, and shaping long-term vulnerability management strategy.
What You Will Do
- Own and manage the Rapid7 vulnerability management platform, including strategy, configuration, lifecycle management, optimization, and vendor engagement.
- Drive the maturity and standardization of vulnerability and patch management practices across global IT and OT environments to reduce enterprise risk.
- Lead platform engineering and continuous improvement efforts, ensuring accurate data collection, analysis, reporting, and actionable insights.
- Partner with infrastructure, manufacturing IT, engineering, and plant-level teams to influence remediation outcomes in complex, uptime-critical environments.
- Monitor vulnerability risk trends, proactively engaging stakeholders to address rising risk and improve remediation effectiveness.
- Provide strategic leadership and enablement, including documentation, training, reporting modernization, and informal mentoring of team members.
What We’re Looking For
- Bachelor’s degree or equivalent experience in Information Systems, Computer Science, Engineering, Technology, Business Administration, or a related field.
- 7+ years of professional experience in cybersecurity, vulnerability management, or related IT security disciplines.
- Hands-on experience administering and operating the Rapid7 platform (InsightVM/Nexpose or broader Rapid7 capabilities), including configuration and ongoing management.
- Experience working in complex enterprise environments, with exposure to manufacturing or operational technology (OT) systems and high-availability or legacy infrastructure.
#LI-MC2
Goodyear is one of the world's largest tire companies. It employs about 68,000 people and manufactures its products in 51 facilities in 19 countries around the world. Its two Innovation Centers in Akron, Ohio, and Colmar-Berg, Luxembourg, strive to develop state-of-the-art products and services that set the technology and performance standard for the industry. For more information about Goodyear and its products, go to Goodyear.com.
If you need reasonable accommodation to complete the online application, or any other part of the employment process, please contact the Goodyear Candidate Care Line at 330.796.4500.
Goodyear is an equal employment opportunity employer. All qualified applicants will receive consideration for employment without regard to any characteristic protected by law.