Lead Cybersecurity -Vulnerability management
About The Position
The Senior Vulnerability Management Lead provides technical leadership and hands-on expertise to secure federal information systems in accordance with the NIST Risk Management Framework (RMF), FISMA, HIPAA, and agency-specific requirements. The role oversees vulnerability management operations, leads incident response planning and execution, and supports continuous security compliance and Authorization to Operate (ATO) maintenance. Working with cross-functional IT teams, the lead strengthens cybersecurity posture through proactive threat mitigation, audit readiness, and implementation of enterprise security controls. This is a hybrid role requiring four days onsite in Arlington, Virginia. The position supervises cybersecurity engineers and specialists and coordinates with internal security, IT operations, legal/compliance, government stakeholders, and multidisciplinary technical teams.
Requirements
- Master’s degree; one and one-half years of additional experience may substitute for one year of a typical degree program.
- Minimum 10 years of experience performing the cybersecurity and team lead tasks and responsibilities listed in the posting.
- Ability to obtain and maintain a public trust clearance.
Nice To Haves
- Extensive experience with NIST RMF in federal environments.
- Hands-on knowledge of vulnerability scanning tools such as Nessus, SIEM platforms, and security automation.
- Experience overseeing enterprise vulnerability scanning using Nessus and agency-approved scanners.
- Experience using SIEM platforms, endpoint protection, and IDS/IPS to monitor events and support investigations.
- Experience leading cybersecurity teams and coordinating with multidisciplinary IT groups.
- Strong understanding of federal cybersecurity mandates, including FISMA, HIPAA, and agency policies.
- Experience with incident response planning, execution, and reporting.
- Ability to interpret threat intelligence and translate it into actionable risk mitigation.
- Ability to manage multiple requests and deadlines in a fast-paced environment.
- CISSP, CISM, CEH, Security+, or equivalent certifications.
- Experience supporting federal law enforcement, DoD, DHS, or DOJ programs.
- Familiarity with compliance auditing tools and enterprise monitoring solutions.
Responsibilities
- Lead full-lifecycle NIST RMF activities, including categorization, control implementation, security assessment, POA&M management, and ATO sustainment.
- Ensure compliance with FISMA, HIPAA, and agency-specific security policies.
- Coordinate with assessment and authorization stakeholders to maintain documentation, respond to findings, and support audits and system reviews.
- Review scan results, validate findings, determine criticality, and coordinate remediation with system owners and operations teams.
- Develop and maintain processes for continuous monitoring, risk scoring, and leadership reporting.
- Integrate threat intelligence platforms to identify emerging risks and drive proactive mitigation.
- Support security audits, penetration tests, and secure configuration enforcement.
- Coordinate with internal security teams, IT operations, legal/compliance, and government stakeholders on security handling, documentation, and reporting.
- Conduct post-incident reviews and improve incident response plans and playbooks.
- Guide implementation and maintenance of security controls across infrastructure, applications, and cloud environments.
- Provide expertise in secure architecture, configuration management, identity and access management, and audit log review.
- Analyze system changes for security impacts and support change control processes.
- Drive continuous improvement, standardization, and security optimization across the program.
- Supervise cybersecurity engineers and specialists, providing mentorship, task direction, and performance oversight.
- Coordinate with network, server, cloud, and application teams to support timely vulnerability remediation and control implementation.
- Support program-level coordination, reporting, stakeholder briefings, and cross-team integration.
Benefits
- Medical insurance with employer contribution
- Dental insurance with employer contribution
- Vision insurance with employer contribution
- Flexible spending or health savings account
- Life and AD&D insurance
- Short- and long-term disability coverage
- Paid time off
- Employee assistance
- 401(k) program with company match
- Additional voluntary or legally required benefits
- May be eligible for incentive compensation based on individual and/or company performance
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
