Vulnerability Management Specialist Mid
About The Position
SMIT-MCEN is the largest IT services program for the Navy and Marine Corps. Under the Service Management, Integration, and Transport (SMIT) portion of the contract, the Leidos team delivers the core backbone of the Navy-Marine Corps Intranet, including cybersecurity services, network operations, service desk, and data transport. Ultimately, Leidos will help unify shore-based networks and data management across the Navy and Marine Corps, improving capability, enhancing service, and achieving significant cost savings by consolidating efforts under one enterprise network. To support this critical effort, Leidos is seeking a Vulnerability Management Specialist Mid to join our team in Camp Lejeune, NC. Vulnerability Management Specialist (Mid) supports the Navy SMIT MCEN program by executing enterprise vulnerability management activities across the Marine Corps Enterprise Network (MCEN). This role is responsible for identifying, assessing, tracking, and reporting Information System vulnerabilities using a combination of automated tools and manual techniques to ensure compliance with DoD cybersecurity requirements and risk management frameworks.
Requirements
- Bachelor’s degree with at least 4 years of related experience; additional experience may be substituted in lieu of degree
- Must have direct vulnerability management experience and IT systems administration experience with cybersecurity responsibilities
- Must possess a current Security+ certification
- US Citizen with an active DoD Secret security clearance
- Hands-on experience with vulnerability scanning and assessment tools (e.g., Nessus, SecurityCenter)
- Experience using RSA Archer or similar eGRC tools for risk and compliance tracking
- Working knowledge of: DoD STIGs and cybersecurity compliance requirements, Risk Management Framework (RMF), and Network and system security principles
Responsibilities
- Execute vulnerability identification, assessment, and tracking activities across MCEN environments
- Perform network and system vulnerability scans using Tenable Security Center, Nessus, and other authorized tools
- Analyze scan results to identify security weaknesses, misconfigurations, and compliance gaps
- Utilize tools such as RedSeal, BigFix, SCAP Compliance Checker (SCC), and HP Fortify to support vulnerability detection and remediation efforts
- Conduct manual inspections and validation of findings where automated tools are insufficient
- Document, track, and manage vulnerabilities within the RSA Archer eGRC system
- Generate and report vulnerability metrics, trends, and risk posture to stakeholders
- Support remediation efforts by coordinating with system administrators, network engineers, and cybersecurity teams
- Ensure compliance with DoD STIGs, RMF controls, and applicable cybersecurity policies
- Assist in continuous monitoring and improvement of the vulnerability management program
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
