Cybersecurity Vulnerability Management Team Lead

Cherokee Federal•United States,

6d•$165,000 - $170,000•Remote

About The Position

Cherokee Federal Systems is seeking an experienced Cybersecurity Vulnerability Management Team Lead to support the NSF Cybersecurity Program. This highly visible role will transform vulnerability management from a traditional scan-and-report function into a proactive, threat-informed Exposure Management capability. The Team Lead will serve as the technical authority, lead vulnerability analysts, collaborate with Security Operations, Cloud Engineering, Infrastructure, Compliance, and Development teams, and introduce detection, validation, and prioritization capabilities that measurably reduce cyber risk. The role requires evaluating emerging technologies and challenging traditional approaches to vulnerability management. The Team Lead will mature vulnerability management across enterprise, cloud, containerized, application, and hybrid environments; own the lifecycle from discovery through verification and executive reporting; optimize vulnerability scanning and cloud-security integrations; and develop automation, dashboards, and workflows. The position includes technical leadership of a small team of analysts. Formal supervisory or management authority was not specified. The position is remote in the United States. Starting salary is $165,000–$170,000 annually. Work is performed primarily in a climate-controlled environment and involves prolonged periods sitting at a desk and working on a computer, with occasional standing or moving about an office for extended periods.

Requirements

At least 8 years of cybersecurity experience.
At least 4 years of direct vulnerability management experience in a federal or large enterprise environment.
At least 3 years leading vulnerability analysts, remediation programs, or enterprise vulnerability management initiatives.
Deep hands-on expertise with Tenable.sc, Tenable.io, and Nessus.
Experience implementing or significantly improving a Vulnerability Management or Exposure Management capability.
Experience with ServiceNow Vulnerability Response and CMDB integrations.
Experience using CISA KEV, EPSS, threat intelligence, asset criticality, and attack path analysis to prioritize vulnerabilities.
Experience supporting AWS, Azure, or hybrid cloud environments.
Experience working with Security Operations and Incident Response teams to identify and rapidly remediate actively exploited vulnerabilities.
Experience briefing technical teams, executives, and federal stakeholders.
Must pass pre-employment qualifications of Cherokee Federal.
Prolonged periods of sitting at a desk and working on a computer; occasional standing or moving about the office for extended periods.

Nice To Haves

Experience with one or more of SafeBreach, AttackIQ, Pentera, XM Cyber, Wiz, Prisma Cloud, or AppScan.
Experience with Breach and Attack Simulation (BAS).
Experience with Continuous Control Validation (CCV).
Experience with External Attack Surface Management (EASM).
Experience with Kubernetes security.
Experience with detection engineering.
Preferred certifications include CISSP, GCIH, CySA+, Security+, Tenable Certified Professional, AWS Security Specialty, and ServiceNow Vulnerability Response Certification.

Responsibilities

Lead and mature NSF’s vulnerability management capability across enterprise, cloud, containerized, application, and hybrid environments.
Provide technical leadership to vulnerability analysts and foster accountability, ownership, collaboration, and continuous improvement.
Develop and maintain a vulnerability management roadmap aligned with evolving threats and organizational priorities.
Prioritize exposures using CISA Known Exploited Vulnerabilities (KEV), EPSS, threat intelligence, asset criticality, identification of internet-facing assets, attack path analysis, and MITRE ATT&CK mapping.
Evaluate emerging technologies that improve vulnerability validation, attack surface visibility, and exposure management.
Advance exposure reduction, detection engineering, continuous validation, cloud-native security, and automation capabilities.
Own discovery, validation, prioritization, remediation coordination, exception handling, verification, and executive reporting.
Operate and optimize Tenable.sc, Tenable.io, and Nessus; improve scan coverage, credential management, accuracy, and false-positive reduction.
Integrate findings from AWS Inspector, Security Hub, GuardDuty, Wiz, Prisma Cloud, and Microsoft Defender for Cloud.
Partner with Application Security and DevSecOps teams on AppScan, DAST, SAST, CI/CD integrations, and container image scanning.
Mature ServiceNow Vulnerability Response through CMDB enrichment, automated ticket creation, SLA tracking, ownership assignment, and escalation workflows.
Identify and develop automation opportunities using APIs, Python, PowerShell, and orchestration capabilities.
Build executive dashboards covering MTTR, SLA adherence, vulnerability aging, exposure trends, scan coverage, and remediation effectiveness.
Brief cybersecurity leadership on emerging risks, remediation progress, and program maturity.
Perform other job-related duties as assigned.

Benefits

Up to a 6% 401(k) company match.
Paid time off.
Medical, dental, and vision insurance, plus prescription drug coverage.
Basic life and AD&D insurance, with supplemental life options.
Short-term and long-term disability coverage.
Paid holidays.
Employee Assistance Program (EAP).
Flexible Spending Account (FSA) and Health Savings Account (HSA) options.
Professional development, training, and certification support.
Voluntary benefits including accident, critical illness, and identity theft protection.