Vulnerability Management Lead (R-00254)

United States·WashingtonRemoteFull-Timelead

OperationsManagement

0 views0 saves0 applied

Apply Now

Quick Summary

Key Responsibilities

Lead and oversee vulnerability scanning, assessment, prioritization, and remediation tracking across federal enterprise systems, networks, applications, cloud environments,

Requirements Summary

Lead and oversee vulnerability scanning, assessment, prioritization, and remediation tracking across federal enterprise systems, networks, applicat

Technical Tools

OperationsManagement

True Zero Technologies, a veteran-owned small business, was founded on the principle that the purposeful enablement of people and technology in an organization directly ties to the quality of its outcomes. True Zero recognizes that those outcomes begin and end with our people, and that is what we have built a community of like-minded, driven, and passionate individuals and innovators who are aligned in a common goal of delivering top-tier services to our customers. Our culture and commitment have been recognized through numerous accolades, including being named one of the Best Places to Work in 2023 in two categories (“Prosperous and Thriving” ($5MM–$50MM in gross revenue) and “Mid-Atlantic Region” (DC, DE, MD, NC, VA, WV)), and again in 2025 as a Best Places to Work honoree. In addition, True Zero earned coveted spots on the Inc. 5000 list of fastest-growing companies in America in 2022, 2023, and 2025, a testament to our sustained growth driven by our people-first approach and unwavering dedication to excellence.

True Zero Technologies is seeking an experienced Vulnerability Management Lead to oversee enterprise vulnerability identification, assessment, remediation tracking, and security risk reduction initiatives within complex federal environments. This leadership position is responsible for coordinating vulnerability management activities across cybersecurity, engineering, and compliance teams, ensuring timely remediation of identified security weaknesses, and supporting federal cybersecurity reporting and compliance requirements.

The ideal candidate will possess extensive hands-on vulnerability management experience, strong technical and analytical capabilities, and expertise in enterprise vulnerability scanning technologies, security compliance frameworks, and federal cybersecurity programs.

Responsibilities

~2 min read

→Enterprise Vulnerability Management & Assessment: Lead and oversee vulnerability scanning, assessment, prioritization, and remediation tracking across federal enterprise systems, networks, applications, cloud environments, and infrastructure to identify and reduce security risks.

→Vulnerability Remediation & POA&M Coordination: Manage vulnerability remediation workflows, monitor corrective action progress, and coordinate with Plan of Action and Milestones (POA&M) support teams to ensure security findings are accurately documented, prioritized, tracked, and resolved within established timelines.

→Cross-Functional Security Collaboration: Partner with Information System Owners (ISOs), Information System Security Officers (ISSOs), compliance personnel, engineering teams, and technical stakeholders to validate vulnerability findings, address security control deficiencies, and coordinate remediation activities.

→Cyber Hygiene & Web Application Security Programs: Lead Cyber Hygiene and Web Application Scanning Program (WASP) activities, coordinating vulnerability assessments, scan scheduling, findings analysis, and remediation efforts to improve enterprise security posture and maintain compliance with applicable federal cybersecurity requirements.

→Vulnerability Management Tools & Integration: Oversee the implementation, configuration, maintenance, and optimization of enterprise vulnerability management technologies, including Tenable, Aqua Security, and Continuous Diagnostics and Mitigation (CDM) integrations, to support comprehensive security visibility and consistent vulnerability reporting.

→Security Metrics, Dashboards & Reporting: Develop and maintain vulnerability management dashboards, key performance indicators (KPIs), remediation metrics, and executive-level reports to monitor vulnerability trends, remediation progress, risk exposure, and overall program effectiveness.

→Risk Prioritization & Continuous Improvement: Evaluate vulnerability severity, exploitability, asset criticality, and operational risk to establish remediation priorities, identify recurring security weaknesses, and recommend improvements to vulnerability management processes, policies, and technical controls.

Requirements

~1 min read

Cybersecurity & Vulnerability Management Experience: Minimum of 6 years of progressive cybersecurity experience, including hands-on vulnerability assessment, security monitoring, remediation coordination, and risk management responsibilities within complex enterprise environments.

Professional Certifications: Must possess at least one of the following certifications: GIAC Certified Incident Handler (GCIH), Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or Certified in Risk and Information Systems Control (CRISC).

Vulnerability Management Technologies & Integration: Demonstrated hands-on experience with Tenable, Aqua Security (AquaSec), and Continuous Diagnostics and Mitigation (CDM) technologies, including vulnerability scanning, security findings analysis, remediation tracking, and integration of vulnerability data across enterprise security platforms.

Operating Systems, Networking & Security Infrastructure: Strong technical understanding of Windows and Linux operating systems, network protocols, enterprise infrastructure, and security configurations, with the ability to assess vulnerabilities across on-premises, cloud, and containerized environments.

Federal Compliance, Reporting & Stakeholder Coordination: Experience coordinating vulnerability remediation activities with security, compliance, and engineering stakeholders, including familiarity with POA&M processes, federal cybersecurity requirements, vulnerability reporting, and the development of actionable security metrics and dashboards.