Cybersecurity Vulnerability Management Lead

Job Summary

Leading a team of analysts, the full-time Cybersecurity Vulnerability Management Lead will enhance the NSF Cybersecurity Program by transforming traditional vulnerability management into a modern, threat-informed exposure management capability while working remotely.

Key Responsibilities

• Lead and mature the NSF's Vulnerability Management capability across various environments, establishing a culture of accountability and continuous improvement
• Modernize detection and prioritization techniques using advanced methodologies and emerging technologies to enhance vulnerability validation and exposure management
• Own the end-to-end vulnerability management process, including discovery, validation, prioritization, and remediation coordination, while optimizing enterprise scanning platforms

Required Qualifications

• 8+ years of cybersecurity experience with 4+ years in direct Vulnerability Management in a federal or large enterprise environment
• 3+ years of experience leading vulnerability analysts or enterprise VM initiatives
• Deep hands-on expertise with Tenable.sc, Tenable.io, and Nessus
• Experience with ServiceNow Vulnerability Response and modern vulnerability prioritization methodologies
• Familiarity with AWS, Azure, or hybrid cloud environments and collaboration with Security Operations teams