Cybersecurity Operations Consultant

Responsibilities

• Lead vulnerability management and secure configuration operations, ensuring alignment with federal cybersecurity mandates.
• Manage, monitor, and report vulnerabilities across NIH/HHS systems using tools such as Invicti and coordinate timely remediation activities.
• Develop vulnerability prioritization models based on risk, exposure, and asset criticality.
• Develop secure configuration baselines and monitoring processes based on CIS Benchmarks.
• Ensure compliance with patching timelines and federal vulnerability directives.
• Collaborate with infrastructure, application, and security teams to validate remediation actions.
• Support preparation of reports for leadership and federal oversight bodies.
• Develop KPI metrics for vulnerability and compliance gap closure rates, asset risk scoring, and compliance tracking.

• Must be able to OBTAIN and MAINTAIN a Federal or DoD "PUBLIC TRUST"; candidates must obtain approved adjudication of their PUBLIC TRUST prior to onboarding with Guidehouse.
• Candidates with an ACTIVE PUBLIC TRUST or SUITABILITY and maintain an active HHS/NIH clearance are preferred.
• Minimum of THREE (3) years of cybersecurity or IT risk management experience, candidates with experience focused on vulnerability management and/or secure configuration are preferred.
• Minimum of a Bachelors Degree is required.
• Hands‑on experience with Invicti.
• Deep understanding of NIST SP 800-53 and FISMA requirements.
• Active CompTIA Security+ CE preferred.
• Other certifications (CISSP, CEH, or cloud-related) are a plus.
• Strong communication and analytical thinking; ability to manage multiple concurrent priorities and deadlines.