Vulnerability Manager Lead

Dark Wolf is seeking a
Vulnerability Management Lead to oversee technical vulnerability operations, modern AI workload security, and compliance baselines across a large-scale, multi-tenant cloud government system. Working closely with cross-functional engineering teams, system administrators, and program leadership, the Lead will drive the end-to-end vulnerability lifecycle from initial detection through final remediation.

We are seeking a collaborative cybersecurity professional with a solid foundation in federal or DoD vulnerability management, cloud environments, and technical risk assessment. This position offers the opportunity to lead operational workflows, leverage data analysis (SQL) and tool integrations (REST APIs) to automate reporting, and help shape security strategies for modern platforms—including emerging AI/LLM workloads.

Whether you are an experienced Lead or a Senior Vulnerability/Systems Analyst ready to take the next step in leadership, this role provides an impactful platform to guide technical risk decisions across a mission-critical system. This position is based out of Arlington, VA with hybrid/remote opportunities.

Additional responsibilities include:

Key Responsibilities

• Oversee daily vulnerability identification, triage, and reporting across AWS cloud assets, traditional hybrid infrastructure, and AI/LLM application stacks.
• Evaluate raw vulnerability data generated by ACAS (Tenable.sc) and AWS security tools to determine its actual threat vector; identify true contextual risk based on compensating controls, network exposure, and the system's specific cloud architecture.
• Leverage ACAS to execute and analyze SCAP-compliant configuration audits, verifying system alignment with established DISA STIG security benchmarks and identifying configuration drift across cloud assets.
• Monitor, document, and track the end-to-end lifecycle of technical remediation efforts.
• Establish and manage cybersecurity vulnerability tickets within Jira to maintain a clear audit trail from identification to closure.
• Serve as a primary point of contact for hands‑on IT support, system administrators, and engineers; clearly communicate the technical details of vulnerabilities, outline required remediation steps, and assist in prioritizing patches.
• Translate un‑remediated, high‑true‑risk vulnerabilities into actionable Plan of Action and Milestones (POA&Ms), clearly detailing the technical milestones and business impacts.
• Translate complex technical findings and AI‑specific security risks into concrete, step‑by‑step remediation guidance for platform, data science, and Dev Ops engineering teams.
• Collaborate with the team to cross‑reference active exploit intelligence against known system vulnerabilities, refining true risk prioritizations based on active real‑world threats.
• Compile and deliver vulnerability posture reports, metrics dashboards, and executive briefings for government stakeholders.
• Mentor mid‑level analysts on triage methodologies, emerging AI threat vectors, technical writing, and workflow automation.

• 6+ years of experience in Cybersecurity, Vulnerability Management, or Systems Administration supporting federal or DoD information systems.
• Direct, hands‑on experience utilizing ACAS (Tenable.sc) to filter, analyze, and report on enterprise vulnerabilities.
• Operational understanding of the Security Content Automation Protocol (SCAP) ecosystem, including how automated configuration audit files translate into compliance metrics within vulnerability scanners.
• Comprehensive understanding of how Splunk Enterprise Security and Trellix (ESS) correlate with vulnerability monitoring activities
• Practical experience writing SQL queries for reporting and/or analytics
• Proven proficiency utilizing Jira (or equivalent enterprise ticketing infrastructure) to track, update, and manage technical workflows through completion.
• Excellent interpersonal and written communication skills, with a demonstrated ability to translate complex security vulnerabilities into actionable guidance for IT personnel.
• Solid understanding of core AWS services (EC2, VPC, Security Groups, IAM) and how vulnerabilities…