Senior Technical Support Specialist

State of Maine•Augusta, ME

4d•$74,846 - $105,056•Hybrid

About The Position

The Vulnerability Management Team Lead provides operational leadership, technical direction, and program oversight for the Information Security Office’s enterprise Vulnerability Management and Application Testing program. The role guides vulnerability identification, validation, prioritization, remediation coordination, application security testing, reporting, metrics development, and continuous improvement across State systems, applications, cloud services, network environments, and enterprise technology assets. The position works with SOC leadership, ISO teams, contractor personnel, application and infrastructure teams, agency stakeholders, vendors, and service providers to improve enterprise visibility into cybersecurity risk. It supports vulnerability scanning, application testing, limited penetration testing, remediation tracking, secure software development practices, dashboards, metrics, reporting, and program documentation. The role also coordinates assigned program resources, advises leadership, supports risk-informed decision-making, guides remediation priorities, and helps align program activities with ISO priorities and statewide cybersecurity needs. The position is based in Augusta. Partial telework is available after three months with management approval, and the role may work up to 90% remotely with management approval. The selected candidate must pass required background checks; fingerprinting may be required. This position is not eligible for visa sponsorship or STEM OPT extensions.

Requirements

At least 8 years of combined related post-secondary education, technical certifications, or technology-related work experience. Related training and internship experience may be credited month for month.

Nice To Haves

Working knowledge of vulnerability management, application security testing, vulnerability assessment, remediation coordination, risk prioritization, and security operations.
Experience administering, configuring, tuning, or supporting vulnerability management or application testing platforms such as Rapid7, Tenable, Qualys, Microsoft Defender Vulnerability Management, HCL AppScan, Burp Suite, OWASP ZAP, or comparable technologies.
Experience coordinating vulnerability scanning, application testing intake, remediation tracking, exception review preparation, validation, or vulnerability reporting across enterprise environments.
Experience with secure software development practices, OWASP Top 10 risks, dynamic or static application testing concepts, manual testing methods, penetration testing concepts, or cloud/container vulnerability review.
Ability to guide technical personnel, coordinate assigned resources, support operational coverage, and manage competing priorities across cybersecurity programs.
Experience communicating vulnerability findings, remediation priorities, risk trends, and operational recommendations to technical and non-technical audiences.
Experience developing or maintaining dashboards, KPIs, KRIs, executive summaries, operational metrics, testing procedures, remediation workflows, playbooks, knowledge articles, or program documentation.
Experience working with application teams, infrastructure teams, vendors, service providers, agency stakeholders, contractor personnel, or cross-functional technical teams.
Professional certifications such as CISSP, CISM, Security+, CySA+, CEH, PenTest+, GPEN, GWAPT, GWEB, OSCP, or comparable credentials.

Responsibilities

Assign and prioritize work, coordinate daily operational coverage, conduct follow-up, guide contractor personnel, and support program readiness.
Lead vulnerability identification, scanning coverage, validation, prioritization, remediation tracking, exception review preparation, and reporting across State technology environments.
Coordinate application security testing intake and activities, analyze and validate findings, document results, communicate vulnerabilities, and support secure software development practices and remediation recommendations.
Configure, maintain, tune, and improve vulnerability management and application testing platforms for reliable scanning, accurate results, reporting, data aggregation, workflow management, and operational visibility.
Develop and maintain dashboards, KPIs, KRIs, reports, templates, executive summaries, operational briefings, and trend analysis materials.
Coordinate remediation activities with application and infrastructure teams, agency stakeholders, vendors, and service providers; clarify risk, track progress, resolve capability gaps, and escalate high-risk or unresolved issues.
Conduct and coordinate limited penetration testing, vulnerability validation, root-cause review, and technical analysis of infrastructure, application, configuration, and process weaknesses.
Advise the Security Operations Center Manager, ISO leadership, technical teams, vendors, service providers, and stakeholders on vulnerability management, application testing, remediation priorities, tools, operational risks, and program improvements.
Participate in stakeholder meetings, analyze technical and operational requirements, contribute to secure software development improvements, develop metrics, produce reports, and deliver briefings or presentations.
Develop and maintain standard operating procedures, testing procedures, remediation workflows, vulnerability management playbooks, knowledge articles, workflow diagrams, and related operational documentation.
Provide training, mentoring, and instructional materials on vulnerability review, application testing, security tooling, remediation processes, and response procedures.

Benefits

Thirteen paid holidays, 12 days of sick leave, and more than three weeks of annual vacation leave; vacation accrual increases with years of service, and overtime-exempt employees receive personal leave.
State-paid 85%–100% of employee-only health insurance premiums, depending on salary.
A 5% employee-only health insurance premium credit for participating employees who meet program requirements.
State-paid 100% of employee-only dental insurance premiums.
State contribution of 14.06% of pay to the Maine Public Employees Retirement System.
Gym membership reimbursement of up to $40 per month.
Health and dependent care flexible spending accounts.
Eligibility for Public Service Student Loan Forgiveness.
Employee assistance through the Living Resources Program.
Forty-two consecutive calendar days of fully paid parental leave for employees welcoming a child; additional unpaid leave may also be available under the Family and Medical Leave Act.
Voluntary pre-tax deferred compensation savings through a MaineSaves 457(b) account.
Flexible scheduling and work-life balance.
Professional growth and development through work with evolving security platforms, testing tools, methods, and enterprise cybersecurity challenges.