Cybersecurity Lead-Vulnerability management

Req : 390742

NTT DATA strives to hire exceptional, innovative and passionate individuals who want to grow with us. If you want to be part of an inclusive, adaptable, and forward-thinking organization,

We are currently seeking a Cybersecurity Lead-Vulnerability management to join our team in Arlington, Virginia (US-VA), United States (US).

The Senior Vulnerability Management Lead provides technical leadership and hands-on expertise to secure federal information systems in accordance with NIST Risk Management Framework (RMF), FISMA, HIPAA, and agency-specific requirements. This role oversees vulnerability management operations, leads incident response planning and execution, and ensures continuous security compliance to support Authorization to Operate (ATO) maintenance. Working closely with cross-functional IT teams, the Team Lead strengthens cybersecurity posture through proactive threat mitigation, audit readiness, and the implementation of enterprise security controls.

• Lead full lifecycle NIST RMF activities, including categorization, control implementation, security assessment, POA&M management, and ATO sustainment.
• Ensure compliance with federal security standards such as FISMA, HIPAA, and agency-specific security policies.
• Coordinate with assessment and authorization stakeholders to maintain documentation, respond to findings, and support audits and system reviews.
• Review scan results, validate findings, determine criticality, and coordinate remediation with system owners and operations teams.
• Develop and maintain processes for continuous monitoring, risk scoring, and reporting to leadership.
• Integrate threat intelligence platforms to identify emerging risks and drive proactive mitigation strategies.
• Support security audits, penetration tests, and secure configuration enforcement.
• Lead coordination with internal security teams, IT operations, legal/compliance, and government stakeholders to ensure proper handling, documentation, and reporting.
• Conduct post-incident reviews and improve incident response plans and playbooks.
• Guide the implementation and maintenance of security controls across infrastructure, applications, and cloud environments.
• Provide expertise in secure architecture, configuration management, identity and access management, and audit log review.
• Analyze system changes for security impacts and support change control processes.
• Drive continuous improvement, standardization, and security optimization across the program.
• Supervise cybersecurity engineers and specialists, providing mentorship, task direction, and performance oversight.
• Facilitate collaboration with network, server, cloud, and application teams to ensure timely vulnerability remediation and control implementation.
• Support program-level coordination activities, including reporting, stakeholder briefings, and cross-team integration efforts.

• Masters Degree, One-and-one- half (1.5) years of additional experience can substitute for one (1) year of a typical degree program.
• Minimum 10 years’ experience performing the cybersecurity and team lead tasks/responsibilities listed above
• Ability to obtain and maintain a public trust clearance
• Hybrid role requiring 4 days onsite in Arlington, VA.

• Extensive experience with NIST RMF in federal environments.
• Hands-on knowledge of vulnerability scanning tools (e.g., Nessus), SIEM platforms, and security automation.
• Oversee enterprise vulnerability scanning operations using tools such as Nessus and agency-approved scanners.
• Use enterprise security tools (e.g., SIEM platforms, endpoint protection, IDS/IPS) to monitor events and support investigations.
• Experience leading cybersecurity teams and coordinating with multidisciplinary IT…