Senior Technical Support Specialist

.

As the Vulnerability Management Team Lead, you’ll provide operational leadership, technical direction, and program oversight for the Information Security Office’s enterprise Vulnerability Management and Application Testing program. This role offers the opportunity to guide vulnerability identification, validation, prioritization, remediation coordination, application security testing, reporting, metrics development, and continuous improvement across State systems, applications, cloud services, network environments, and enterprise technology assets.

You’ll work closely with SOC leadership, ISO teams, skilled contractor personnel, application teams, infrastructure teams, agency stakeholders, vendors, service providers, and leadership to improve enterprise visibility into cybersecurity risk. The position supports vulnerability scanning, application testing, limited penetration testing, remediation tracking, secure software development practices, dashboarding, metrics, reporting, and program documentation.

This position also plays a key role in coordinating assigned program resources, advising leadership, supporting risk-informed decision-making, guiding remediation priorities, and ensuring vulnerability management and application testing activities align with ISO priorities and statewide cybersecurity needs.

We are seeking a highly talented individual who will represent our C.A.R.E. values in all that they do. 

At MaineIT we:   

• Practice Customer-focus, ensuring that our customers are heard, and their needs are met  
• Hold ourselves to a high level of Accountability by being transparent with our stakeholders  
• Maintain an effective level of Responsiveness by providing timely updates in a proactive manner  
• Strive to provide Empathy-driven, people-focused services by applying emotional intelligence skills and behaviors 
  

No two days look quite the same in MaineIT’s Information Security Office. In general, you can expect to:

• →Lead Vulnerability Management Operations: Assign and prioritize work, coordinate daily operational coverage, conduct follow-up, guide skilled contractor personnel, support program readiness, and help ensure vulnerability management and application testing work is completed accurately, consistently, and timely.
• →Oversee the Enterprise Vulnerability Management Program: Lead vulnerability identification, scanning coverage, validation, prioritization, remediation tracking, exception review preparation, and reporting across State systems, applications, cloud services, network environments, and enterprise technology assets.
• →Lead Application Security Testing: Coordinate testing intake, testing activities, analysis, validation, documentation, and communication of application vulnerabilities, including support for secure software development practices and remediation recommendations.
• →Administer Security Testing Platforms: Configure, maintain, tune, and improve vulnerability management and application testing platforms to support reliable scanning, accurate results, effective reporting, data aggregation, workflow management, and operational visibility.
• →Develop Reporting and Metrics: Build and maintain dashboards, KPIs, KRIs, reports, templates, executive summaries, operational briefings, and trend analysis materials that support risk-informed decision-making and program accountability.
• →Coordinate Remediation Activities: Work with application teams, infrastructure teams, agency stakeholders, vendors, and service providers to communicate findings, clarify risk, track remediation progress, resolve capability gaps, and escalate unresolved or high-risk issues.
• →Support Security Analysis and Testing: Conduct and coordinate limited penetration testing, vulnerability validation, root-cause review, and technical analysis to identify infrastructure, application, configuration, and process weaknesses.
• →Provide Technical Guidance: Advise the Security Operations Center Manager, ISO leadership, technical teams, vendors, service providers, and stakeholders regarding vulnerability management, application testing, remediation priorities, tool use, operational risks, and program improvements.
• →Support Security Initiatives and Projects: Participate in stakeholder meetings; analyze technical and operational requirements; contribute to secure software development improvements; develop metrics; produce reports; and deliver briefings or presentations to support informed decision-making.
• →Maintain Program Documentation: Develop, document, and maintain standard operating procedures, testing procedures, remediation workflows, vulnerability management playbooks, knowledge articles, workflow diagrams, and supporting operational documentation.
• →Support Training and Knowledge Sharing: Provide training, mentoring, and instructional materials on vulnerability review, application testing, security tooling, remediation processes, and response procedures to improve readiness, consistency, and response effectiveness.

As a cybersecurity professional, you have a lot of options when it comes to your career. We get it. Here’s what sets our role apart:

• Enterprise Risk Visibility: Take a leadership role in identifying, validating, prioritizing, and communicating security weaknesses affecting enterprise technology environments.
• Program Leadership: Help guide a fully developed enterprise Vulnerability Management and Application Testing program with statewide cybersecurity impact.
• Application Security Experience: Work with application testing activities, secure development practices, remediation coordination, and application risk reduction across a large public-sector environment.
• Mission-Driven Public Service: Strengthen the capabilities that help protect critical government systems, applications, services, and sensitive information.
• Enterprise-Scale Impact: Support vulnerability visibility and risk reduction across State systems, cloud services, applications, network environments, and other enterprise technology assets.
• Technical Leadership Opportunities: Guide program resources, coordinate stakeholders, advise leadership, improve workflows, refine reporting, and mature vulnerability management and testing practices.
• Strategic Program Involvement: Contribute to testing coverage discussions, risk prioritization methods, dashboard improvements, KPI/KRI development, remediation tracking, and operational planning.
• Continuous Improvement: Help improve program maturity through data quality improvements, reporting enhancements, workflow refinement, secure software development recommendations, and documentation updates.

If you are seeking a culture that supports growth, fosters success, and want to play a key role in maintaining the confidentiality, integrity, and availability of State of Maine data and systems, then MaineIT is where you need to be. With the MaineIT Information Security Office, you can expect:

• Generous Telework Opportunities: This position can work up to 90% remotely with management approval.
• Meaningful & Impactful Work: Lead vulnerability management and application testing activities that support statewide cybersecurity risk reduction.
• Supportive Team: Join a collaborative, professional environment that invests in your development and values operational excellence.
• Work-Life Balance: Flexible scheduling and a healthy balance of professional and personal time.
• Innovative Culture: Be part of a team that values modernization, program maturity, continuous improvement, and practical security outcomes.
• Professional Growth: Work with evolving vulnerability management platforms, application testing tools, security testing methods, remediation workflows, metrics, and enterprise-scale cybersecurity challenges.

• Working knowledge of vulnerability management practices, application security testing, vulnerability assessment, remediation coordination, risk prioritization, and security operations.
• Experience administering, configuring, tuning, or supporting vulnerability management or application testing platforms such as Rapid7, Tenable, Qualys, Microsoft Defender Vulnerability Management, HCL AppScan, Burp Suite, OWASP ZAP, or comparable technologies.
• Experience coordinating vulnerability scanning, application testing intake, remediation tracking, exception review preparation, validation activities, or vulnerability reporting across enterprise environments.
• Experience with secure software development practices, OWASP Top 10 risks, dynamic or static application testing concepts, manual testing methods, penetration testing concepts, or cloud/container vulnerability review.
• Demonstrated ability to guide technical personnel, coordinate assigned resources, support operational coverage, and manage competing priorities across active cybersecurity programs.
• Experience communicating vulnerability findings, remediation priorities, risk trends, and operational recommendations to technical and non-technical audiences.
• Experience developing or maintaining dashboards, KPIs, KRIs, executive summaries, operational metrics, testing procedures, remediation workflows, playbooks, knowledge articles, or program documentation.
• Experience working with application teams, infrastructure teams, vendors, service providers, agency stakeholders, contractor personnel, or cross-functional technical teams.
• Professional certifications such as CISSP, CISM, Security+, CySA+, CEH, PenTest+, GPEN, GWAPT, GWEB, OSCP, or comparable credentials.

Please submit a cover letter along with a current resume and three (3) professional references. 

In order for us to properly determine if you meet the minimum qualifications for any posting, you must be sure your resume includes the month and year for any relevant experience listed. Your resume should include the duties and responsibilities associated with each position. Any experience that was not full-time employment should be identified as such.  

Research shows that people from historically excluded communities tend to apply to jobs only when they check every box in the posting. If you’re currently reading this and hesitating to apply for that reason, we encourage you to go for it! Let us know how your experience and passion set you apart. 

If you require a paper application, please download and print one HERE

.