Vulnerability Management Engineering Lead
About The Position
G2IT is seeking a Vulnerability Management Engineering Lead to support a critical Department of Defense mission in Quantico, Virginia. This onsite role leads vulnerability analysis, patch management, security compliance, and remediation across thousands of endpoints in highly secure environments, including NIPRNet, SIPRNet, and JWICS. The position works with cybersecurity engineers, system administrators, ISSOs, and security leadership to identify and prioritize vulnerabilities, improve security processes, and maintain compliance with DoD cybersecurity standards. The role includes analyzing ACAS/Nessus results, coordinating remediation of CAT I, II, and III vulnerabilities, engineering and deploying security patches, assessing systems against DISA STIGs, and maintaining POA&Ms in eMASS. It also investigates security and patching issues, produces reports and metrics for leadership and government stakeholders, and seeks opportunities to automate and improve vulnerability management. The position requires U.S. citizenship and an active Top Secret clearance with SCI eligibility, along with the specified investigation currency or continuous vetting eligibility.
Requirements
- U.S. citizenship.
- Active Top Secret clearance with SCI eligibility and a favorably adjudicated Tier 5/Tier 5 Reinvestigation (T5/T5R), with investigation currency or Continuous Evaluation/Vetting eligibility.
- Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field, plus at least 4 years of relevant experience; an additional 4 years of relevant experience may substitute for the degree.
- At least 4 years of experience in cybersecurity, vulnerability management, security compliance, or RMF continuous monitoring within DoD or federal environments.
- Current DoD 8570/8140 IAT Level II certification, such as Security+ CE, CySA+, GSEC, SSCP, or another qualifying certification.
- Hands-on experience with ACAS/Nessus vulnerability scanning and analysis.
- Experience using DISA STIG Viewer and SCAP Compliance Checker to assess system security.
- Familiarity with MECM/SCCM, patch management, and enterprise endpoint security.
- Experience maintaining POA&Ms, security documentation, and compliance evidence in eMASS.
- Knowledge of NIST SP 800-53, RMF, DISA STIGs, and DoD cybersecurity requirements.
- Understanding of Windows and Linux operating systems, Active Directory, networking, and endpoint management.
- Strong troubleshooting, analytical, documentation, and communication skills.
- Ability to work independently and collaborate effectively with technical and cybersecurity teams.
Nice To Haves
- Experience supporting DoD, Department of War, or Intelligence Community networks.
- Experience working across classified and unclassified environments, including NIPRNet, SIPRNet, and JWICS.
- Knowledge of Microsoft Intune, HBSS/ESS, and enterprise security monitoring tools.
- Familiarity with USCYBERCOM/JFHQ-DODIN directives and IAVM compliance requirements.
- Experience creating cybersecurity dashboards and reports using Power BI.
- Experience with ServiceNow or similar IT Service Management platforms.
- Experience improving vulnerability management workflows through automation.
Responsibilities
- Analyze ACAS/Nessus scan results to identify, assess, and prioritize vulnerabilities across enterprise systems.
- Develop and coordinate remediation plans for CAT I, II, and III vulnerabilities in line with DoD requirements and deadlines.
- Engineer, test, and deploy operating system and third-party security patches using MECM/SCCM and Microsoft Intune.
- Evaluate systems against DISA STIGs using STIG Viewer, SCAP Compliance Checker, and other security assessment tools.
- Maintain POA&Ms in eMASS, documenting security risks, mitigation strategies, and remediation progress.
- Investigate patch failures, non-compliant endpoints, and recurring vulnerabilities; identify root causes and implement solutions.
- Produce vulnerability assessments, STIG compliance reports, and cybersecurity metrics for leadership and government stakeholders.
- Coordinate remediation and security standards with ISSOs, system administrators, and cybersecurity personnel.
- Identify opportunities to automate vulnerability management, improve patch deployment, and reduce remediation timelines.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
