LOE 1 Tech Lead – Vulnerability Management Technology

Leidos

3d•$154,050 - $278,475

About The Position

The Tech Lead will coordinate and lead vulnerability management technology improvements across multiple technical teams responsible for delivering components of the end-to-end vulnerability management process. The role will drive the transition from manually coordinated vulnerability remediation to a continuously monitored, automated, and risk-based operating model. It will oversee integration of continuous monitoring, automated security testing, vulnerability intelligence, automated decisioning, patch orchestration, and remediation validation to enable machine-speed remediation with minimal human intervention. The position requires technical leadership, cross-functional coordination, experience with software development and modern engineering practices, and practical knowledge of Agile delivery using the Scaled Agile Framework (SAFe). The Tech Lead will balance automation and rapid remediation with operational resilience, compliance, security, and appropriate human oversight for high-risk or exceptional scenarios. The role also supports scalable, secure, resilient, supportable, auditable solutions aligned with enterprise architecture and cybersecurity requirements.

Requirements

Master's degree or equivalent and 15+ years of experience.
Active Secret clearance.
Experience as a Tech Lead, Technical Delivery Lead, Engineering Lead, Security Engineering Lead, or in a similar technical leadership role.
Demonstrated experience coordinating technology delivery across multiple technical teams and organizational boundaries.
Experience designing, implementing, or operating automated vulnerability remediation and patch orchestration capabilities.
Strong understanding of software development lifecycles, modern engineering practices, application architectures, and operational support models.
Practical experience working in Agile environments, preferably using the Scaled Agile Framework (SAFe).
Strong understanding of continuous monitoring, automated security testing, CI/CD, DevSecOps, infrastructure automation, and event-driven integration patterns.
Understanding of vulnerability management, cybersecurity operations, security tooling, risk management, and risk-based vulnerability prioritization.
Experience integrating vulnerability scanners, endpoint management platforms, configuration management tools, ticketing systems, cloud services, security platforms, and deployment pipelines.
Knowledge of automated patch validation, deployment safeguards, release management, rollback strategies, and recovery procedures.
Experience using APIs, scripting, workflow automation, orchestration platforms, policy-as-code, or similar automation technologies.
Ability to establish automation KPIs and use operational data to improve remediation effectiveness.
Ability to balance machine-speed remediation with operational resilience, security controls, compliance obligations, change management, and business continuity.
Experience defining governance models, approval thresholds, exception processes, and human-oversight controls for automated changes.
Ability to manage technical dependencies, delivery risks, competing priorities, and stakeholder expectations.
Strong analytical, problem-solving, communication, facilitation, and influencing skills.
Experience leading cross-team adoption of automation and standardizing processes across diverse technology environments.
Ability to convert business, security, compliance, and operational requirements into actionable technical requirements and deliverable outcomes.

Nice To Haves

Experience with enterprise vulnerability management platforms and security scanning technologies.
Knowledge of risk-based vulnerability management, vulnerability intelligence, exploitability analysis, and exposure management.
Experience integrating security tools with IT service management, asset management, configuration management, cloud, DevOps, endpoint, and reporting platforms.
Experience with automated patching solutions and endpoint or server management technologies.
Familiarity with deployment rings, canary releases, blue-green deployments, automated rollback, and progressive delivery.
Experience embedding vulnerability remediation into software development and CI/CD pipelines.
Familiarity with Agile delivery tools such as Jira, Azure DevOps, or equivalent platforms.
Experience working in regulated, high-availability, or business-critical technology environments.
Knowledge of cloud security, container security, infrastructure-as-code, software composition analysis, static application security testing, and dynamic application security testing.
Relevant certifications in cybersecurity, Agile delivery, architecture, cloud, automation, or project management.

Responsibilities

Lead technical delivery of vulnerability management technology improvements across engineering, security, infrastructure, application, cloud, and platform teams.
Coordinate cross-team dependencies, priorities, risks, delivery timelines, technical decisions, and implementation activities.
Establish and maintain vulnerability management requirements, and guide delivery of technical solutions, capabilities, architectures, implementation plans, and measurable outcomes.
Promote consistent engineering standards, integration patterns, automation practices, data quality, security controls, and operational processes.
Develop and maintain success metrics and reporting frameworks, including roadmaps and outcomes.
Ensure technology enhancements support the complete vulnerability management lifecycle: asset and vulnerability identification, continuous monitoring, risk assessment and prioritization, automated remediation, patch testing and deployment, validation and verification, reporting and metrics, and exception and risk acceptance management.
Oversee integration of continuous monitoring, automated security testing, vulnerability intelligence, automated patching, and remediation validation across the technology estate.
Oversee implementation of end-to-end, machine-driven vulnerability remediation workflows that identify, assess, prioritize, remediate, and validate vulnerabilities in alignment with objectives and executive outcome drivers.
Coordinate security-tool integrations with asset and configuration management platforms, vulnerability scanners, endpoint and patch management tools, CI/CD pipelines, cloud platforms, DevOps and infrastructure automation tools, IT service management systems, and reporting and analytics platforms.
Drive use of APIs, orchestration, event-driven workflows, infrastructure automation, and policy-as-code to reduce manual handoffs and accelerate remediation.
Ensure automated patching includes deployment safeguards such as deployment rings, canary releases, maintenance windows, pre-deployment testing, rollback capabilities, exception handling, and recovery procedures.
Collaborate with Product Owners, Enterprise and Solution Architects, Engineering Leads, Security teams, Operations teams, and other delivery stakeholders.
Support planning and execution in Agile SAFe ceremonies, including PI Planning, backlog refinement, sprint planning, system demos, reviews, and retrospectives.
Track delivery progress and proactively resolve technical issues, delivery risks, impediments, and cross-team dependencies.
Contribute to technical roadmaps, solution designs, estimates, business cases, investment proposals, and delivery plans.
Establish measurable service-level objectives for vulnerability detection, prioritization, remediation, validation, and exception closure.
Monitor automation performance using metrics such as remediation cycle time, automation coverage, patch success rate, rollback rate, validation failure rate, false-positive rate, vulnerability recurrence rate, and percentages remediated without manual intervention and within service-level objectives.
Ensure automated actions are auditable, traceable, policy-compliant, and supported by appropriate logging, monitoring, alerting, access controls, and change records.
Partner with platform engineering, DevOps, infrastructure, application, cloud, and security teams to embed vulnerability remediation into development and operational workflows.
Lead continuous improvement to increase automation coverage, reduce remediation latency, improve data quality, and safely remove unnecessary manual intervention.
Communicate complex technical topics, delivery progress, risks, and recommendations clearly to technical and non-technical stakeholders.