Vulnerability Management Lead

Job Summary

To modernize the agency's cybersecurity posture, the full-time Remote Vulnerability Management Lead will oversee vulnerability scanning operations, coordinate with cross-functional teams to address security gaps, and manage compliance reporting for a large-scale federal civilian environment.

Key responsibilities

• Oversee enterprise vulnerability scanning operations and stakeholder communication with POA&M support
• Coordinate with ISOs, ISSOs, and engineering teams to identify and remediate security vulnerabilities
• Develop and maintain dashboards to provide real-time visibility into vulnerability management posture and remediation progress

Required qualifications

• 6+ years of cybersecurity experience with expertise in vulnerability management
• Active Public Trust 6c clearance or ability to obtain one
• At least one relevant certification such as GCIH, CISSP, CISM, or CRISC
• Hands-on experience with vulnerability management tools like Tenable and AquaSec
• Strong understanding of federal compliance frameworks including NIST RMF and FISMA