Vulnerability Management Engineer Remote​/Telecommute

Vulnerability Management Engineer

Apex Systems is currently hiring a Vulnerability Management Engineer with a large federal client. This role is in support of the FEMA Office of the Chief Information Security Officer (OCISO) in Washington, DC. In this role, you will be responsible for identifying, assessing, prioritizing, and coordinating the remediation of cybersecurity vulnerabilities across FEMA's enterprise environment. You will work closely with system owners, cybersecurity teams, and enterprise administrators to reduce risk, improve security posture, and ensure vulnerabilities are properly remediated and validated.

Project Details / Mission Supported:

• Utilize Qualys to identify, prioritize, track, and validate remediation of security vulnerabilities.
• Monitor and manage Remediation Work Plans (RWPs) across the enterprise environment.
• Coordinate remediation efforts with system owners, cybersecurity teams, and enterprise administrators.
• Validate the closure of vulnerabilities and ensure remediation activities are documented in a detailed, audit-ready manner.
• Provide daily technical remediation support services.
• Analyze vulnerability findings for risk, accuracy, and remediation prioritization.
• Generate vulnerability reduction reports, trend analysis reports, and dashboards for leadership.
• Support internal and external audit events.

Qualified candidates will have the following experience and skills:

• Bachelor's degree and 6+ years of applicable experience, OR Associate's degree and 8+ years of applicable experience, OR Master's degree and 4+ years of applicable experience, OR 12+ years of applicable experience in lieu of a degree.
• Must be able to obtain and maintain a public trust suitability.
• Demonstrated experience with Qualys is mandatory.
• Experience with vulnerability assessment methodologies and risk analysis.
• Strong analytical skills for vulnerability prioritization and trend analysis.
• Must be located in the Washington D.C. metropolitan area for occasional onsite meetings.
• Experience with vulnerability scanning tools such as db Protect, Webinspect, or Tenable is preferred.
• Knowledge of security compliance frameworks is preferred.
• Experience with reporting and dashboard tools such as Tableau, Power BI, or Splunk is preferred.

Location:

Remote – must be local to Washington, DC for occasional onsite meetings. Onsite expectation: 100% remote – occasional onsite meetings in Washington, DC Clearance Level: Public Trust Salary/Pay range: $48-50/hr

PLEASE NOTE:

Candidates must be able to obtain and/or maintain a Public Trust security clearance as a condition and continuation of employment*