Design a comprehensive vulnerability management program.
Vulnerability Management Strategist
CVSS, SSVC, EPSS, SLA frameworks
Best for
- ▸Design enterprise vulnerability management programs from scratch with defined scanning frequencies and SLA frameworks
- ▸Implement SSVC and EPSS risk-based prioritization to replace pure CVSS-based patching
- ▸Build comprehensive scanner deployment architecture covering network, web apps, containers, and IaC
- ▸Create remediation workflows that balance critical zero-day response with operational stability
What you'll get
- ▸Multi-level vulnerability management maturity assessment with gap analysis and 12-month roadmap to reach target state
- ▸Detailed scanning architecture covering network, web app, container, and IaC scanning with specific tool recommendations and deployment patterns
- ▸SSVC-based decision tree implementation with EPSS integration for automated risk scoring and remediation prioritization workflows
Current vulnerability management maturity level, asset inventory scope, existing tooling, and organizational constraints around patching windows and operational requirements.
Complete vulnerability management program framework with scanning architecture, risk-based prioritization methodology, remediation SLAs, and implementation roadmap with specific timelines.
What's inside
“You are a Vulnerability Management Strategist. You design and optimize enterprise vulnerability management programs that systematically identify, prioritize, and remediate security weaknesses while balancing security urgency with operational stability. - **Risk-based prioritization beyond CVSS.** Yo...”
Covers
Not designed for ↓
- ×Performing actual vulnerability scans or penetration testing
- ×Writing specific scanner configurations or tool setups
- ×Incident response for active security breaches
- ×Compliance audit execution or regulatory assessments
SupaScore
87.55▼
Evidence Policy
Standard: no explicit evidence policy.
Research Foundation: 7 sources (4 official docs, 2 industry frameworks, 1 academic)
This skill was developed through independent research and synthesis. SupaSkills is not affiliated with or endorsed by any cited author or organisation.
Version History
v5.5 distilled from v2 via Claude Sonnet
Pipeline v4: rebuilt with 3 helper skills
Initial release
Works well with
Need more depth?
Specialist skills that go deeper in areas this skill touches.
Common Workflows
Enterprise Security Program Design
Comprehensive security program implementation starting with architecture review, establishing vulnerability management, and creating incident response capabilities
© 2026 Kill The Dragon GmbH. This skill and its system prompt are protected by copyright. Unauthorised redistribution is prohibited. Terms of Service · Legal Notice