Cybersecurity Lead-Vulnerability management

NTT DATA Services•Arlington, VA

49d•$103,275 - $210,000•Hybrid

About The Position

The Senior Vulnerability Management Lead provides technical leadership and hands-on expertise to secure federal information systems in accordance with NIST Risk Management Framework (RMF), FISMA, HIPAA, and agency-specific requirements. The role oversees vulnerability management operations, leads incident response planning and execution, and ensures continuous security compliance to support Authorization to Operate (ATO) maintenance. Working with cross-functional IT teams, the lead strengthens cybersecurity posture through proactive threat mitigation, audit readiness, and implementation of enterprise security controls. The position is based in Arlington, Virginia, and is hybrid, requiring four days onsite. The lead supervises cybersecurity engineers and specialists, supports program-level coordination and stakeholder briefings, and works across infrastructure, applications, and cloud environments. The posting identifies the pay range as $103,275–$210,000 and notes that compensation may include performance-based incentive compensation. Company benefits include medical, dental, and vision insurance; flexible spending or health savings account; life and AD&D insurance; short- and long-term disability coverage; paid time off; employee assistance; and a 401(k) program with company match.

Requirements

Master’s degree; one and one-half years of additional experience may substitute for one year of a typical degree program.
At least 10 years of experience performing the cybersecurity and team-lead tasks and responsibilities described in the posting.
Ability to obtain and maintain a public trust clearance.
Hybrid work requiring four days onsite in Arlington, Virginia.

Nice To Haves

Extensive experience with NIST RMF in federal environments.
Hands-on knowledge of vulnerability scanning tools such as Nessus, SIEM platforms, and security automation.
Experience leading cybersecurity teams and coordinating with multidisciplinary IT groups.
Strong understanding of federal cybersecurity mandates, including FISMA, HIPAA, and agency policies.
Experience with incident response planning, execution, and reporting.
Ability to interpret threat intelligence and translate it into actionable risk mitigation.
Ability to manage multiple requests and deadlines in a fast-paced environment.
CISSP, CISM, CEH, Security+, or equivalent certifications.
Experience supporting federal law enforcement, DoD, DHS, or DOJ programs.
Familiarity with compliance auditing tools and enterprise monitoring solutions.

Responsibilities

Lead full-lifecycle NIST RMF activities, including categorization, control implementation, security assessment, POA&M management, and ATO sustainment.
Ensure compliance with federal security standards, including FISMA, HIPAA, and agency-specific security policies.
Coordinate with assessment and authorization stakeholders to maintain documentation, respond to findings, and support audits and system reviews.
Review scan results, validate findings, determine criticality, and coordinate remediation with system owners and operations teams.
Develop and maintain continuous monitoring, risk-scoring, and leadership-reporting processes.
Integrate threat intelligence platforms to identify emerging risks and drive proactive mitigation strategies.
Support security audits, penetration tests, and secure configuration enforcement.
Coordinate with internal security teams, IT operations, legal and compliance teams, and government stakeholders to ensure proper handling, documentation, and reporting.
Conduct post-incident reviews and improve incident response plans and playbooks.
Guide implementation and maintenance of security controls across infrastructure, applications, and cloud environments.
Provide expertise in secure architecture, configuration management, identity and access management, and audit log review.
Analyze system changes for security impacts and support change control processes.
Drive continuous improvement, standardization, and security optimization across the program.
Supervise cybersecurity engineers and specialists, providing mentorship, task direction, and performance oversight.
Facilitate collaboration with network, server, cloud, and application teams to ensure timely vulnerability remediation and control implementation.
Support program-level coordination, including reporting, stakeholder briefings, and cross-team integration efforts.
Oversee enterprise vulnerability scanning operations using Nessus and agency-approved scanners.
Use enterprise security tools, including SIEM platforms, endpoint protection, and IDS/IPS, to monitor events and support investigations.