Enterprise Vulnerability Management Lead SME

ECS Tech Inc•Fairfax, VA

1d•Onsite

About The Position

The Enterprise Vulnerability Management Lead SME serves as the principal authority for vulnerability lifecycle management across the War Data Platform's (WDP) classified and unclassified enterprise environments. This role directs end-to-end remediation coordination, POA&M governance, and risk acceptance activities to sustain continuous authorization posture across NIPRNet, SIPRNet, and JWICS. It is a senior subject matter expert position requiring deep expertise in enterprise vulnerability operations, Department of War (DoW) Risk Management Framework execution, and Authorizing Official-level reporting. The role has direct responsibility for protecting mission-critical AI and data platform capabilities that support warfighter decision-making at the highest levels of DoW leadership. The WDP is a key initiative within the U.S. Department of War's AI-First strategy, separating business and financial data from operational warfighting data to accelerate AI deployment on the battlefield. The WDP extends to Unclassified, Secret, and Top Secret environments and supports collaboration between Combatant Commands, Joint Staff directorates, Senior Executive Service leaders, and operational analysts.

Requirements

Current Secret security clearance.
12+ years of experience in enterprise vulnerability management, cybersecurity operations, or a closely related discipline, with demonstrated senior subject matter expert-level ownership of vulnerability lifecycle operations across complex federal, DoW, or enterprise classified network and cloud environments.
IAM Level I certification from an approved credential, including CompTIA Security+ CE, ISC² CAP, ISC² SSCP, or GIAC GSLC.
Demonstrated hands-on expertise directing enterprise-scale vulnerability management programs using ACAS or Nessus, with applied experience managing POA&M portfolios, producing Authorizing Official-level risk reporting, and leading remediation coordination across diverse system owner communities in support of continuous authorization under NIST 800-53 and DoW RMF requirements.
Proven experience supporting DoW or federal Risk Management Framework processes, including preparation and maintenance of Body-of-Evidence packages, deviation and risk acceptance documentation, and continuous monitoring artifacts in Government-approved systems such as eMASS or Xacta.
Strong problem-solving and decision-making capabilities, with a proven ability to weigh the relative costs and benefits of potential actions and identify the most appropriate solution.
Highly developed interpersonal and oral/written communication skills, with the ability to effectively and professionally interact with a diverse set of stakeholders (from peers to end-users to executive management).

Responsibilities

Leads coordinated vulnerability management operations supporting Department of War mission systems across unclassified and classified networks.
Directs enterprise vulnerability lifecycle activities including scan result validation, risk triage, remediation coordination, and continuous tracking of findings affecting operating systems, applications, databases, and network devices.
Analyzes vulnerability data generated by ACAS, endpoint security platforms, and cloud security tooling to distinguish true risk conditions from false positives and environmental artifacts.
Develops prioritized remediation strategies aligned to mission impact, threat severity, and authorization timelines while coordinating corrective actions with system owners, platform engineers, and cybersecurity teams.
Maintains authoritative vulnerability records and remediation status within POA&M repositories, continuous monitoring dashboards, and authorization artifacts supporting Risk Management Framework execution.
Supports deviation requests and risk acceptance actions through defensible technical analysis and documented mitigation strategies.
Produces vulnerability trend reports, remediation performance metrics, and executive summaries for cybersecurity leadership and Authorizing Officials using ServiceNow, SharePoint, and reporting platforms.
Guides junior analysts through standardized workflows for scan validation, POA&M updates, and stakeholder coordination while maintaining consistency and data integrity.
Enables sustained authorization posture, reduced exposure windows, and improved cyber hygiene across enterprise environments while reinforcing program values of accountability, operational readiness, transparency, and disciplined risk management.
Performs other duties as assigned.