A significant chunk of the security and IT profession is involved in vulnerability assessment and management. There are positions in incident response, security operation centres, individual analyst teams, on-premises and cloud IT infrastructure, senior management, reporting directly to the CISO or CEO, and incident response. The job level often determines the technical depth. However, each role is crucial to the vulnerability assessment and management process.