Senior Vulnerability Management Engineer ​/ Lead

Senior Vulnerability Management Engineer

Lead enterprise vulnerability management operations and continuous program improvement. Manage and optimize vulnerability scanning infrastructure and tools. Oversee credentialed host, network, application, database, and endpoint vulnerability scanning. Analyze scan results and prioritize vulnerabilities based on risk and federal requirements. Lead vulnerability discovery, validation, mitigation, remediation tracking, and closure. Ensure critical vulnerabilities are escalated and tracked through resolution. Monitor the CISA Known Exploited Vulnerabilities (KEV) Catalog and other authoritative sources.

Coordinate remediation activities with system owners and technical teams. Provide risk analysis and technical recommendations for identified vulnerabilities. Support specialized vulnerability assessments for High Value Assets. Develop reports, dashboards, metrics, and executive briefings. Ensure reporting complies with NIH, HHS, CISA, FISMA, and HVA requirements. Improve tool tuning, asset visibility, and reporting accuracy. Mentor mid-level and junior staff.

Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or related field. 8–12 years of cybersecurity experience, including at least 5 years in enterprise vulnerability management. Experience with Tenable, Qualys, Rapid7, Microsoft Defender Vulnerability Management, or similar tools. Knowledge of CVEs, CVSS, KEVs, NIST guidance, FISMA, CISA directives, and federal vulnerability remediation requirements. Strong communication and reporting skills.

CISSP, CISM, GIAC Certified Enterprise Defender (GCED), GIAC Certified Vulnerability Assessor (GCVA), CompTIA CySA+, Tenable Certified Professional, Qualys VMDR Certification.