Cybersecurity Lead-Vulnerability management

Job Summary: The Senior Vulnerability Management Lead provides technical leadership and hands-on expertise to secure federal information systems in accordance with NIST Risk Management Framework (RMF), FISMA, HIPAA, and agency-specific requirements. This role oversees vulnerability management operations, leads incident response planning and execution, and ensures continuous security compliance to support Authorization to Operate (ATO) maintenance. Working closely with cross-functional IT teams, the Team Lead strengthens cybersecurity posture through proactive threat mitigation, audit readiness, and the implementation of enterprise security controls.

Responsibilities: Lead full lifecycle NIST RMF activities, including categorization, control implementation, security assessment, POA&M management, and ATO sustainment. Ensure compliance with federal security standards such as FISMA, HIPAA, and agency-specific security policies. Coordinate with assessment and authorization stakeholders to maintain documentation, respond to findings, and support audits and system reviews. Review scan results, validate findings, determine criticality, and coordinate remediation with system owners and operations teams. Develop and maintain processes for continuous monitoring, risk scoring, and reporting to leadership. Integrate threat intelligence platforms to identify emerging risks and drive proactive mitigation strategies. Support security audits, penetration tests, and secure configuration enforcement. Lead coordination with internal security teams, IT operations, legal/compliance, and government stakeholders to ensure proper handling, documentation, and reporting. Conduct post-incident reviews and improve incident response plans and playbooks. Guide the implementation and maintenance of security controls across infrastructure, applications, and cloud environments. Provide expertise in secure architecture, configuration management, identity and access management, and audit log review. Analyze system changes for security impacts and support change control processes. Drive continuous improvement, standardization, and security optimization across the program. Supervise cybersecurity engineers and specialists, providing mentorship, task direction, and performance oversight. Facilitate collaboration with network, server, cloud, and application teams to ensure timely vulnerability remediation and control implementation. Support program-level coordination activities, including reporting, stakeholder briefings, and cross-team integration efforts.

Qualifications: Masters Degree, One-and-one-half (1.5) years of additional experience can substitute for one (1) year of a typical degree program. Minimum 10 years' experience performing the cybersecurity and team lead tasks/responsibilities listed above Ability to obtain and maintain a public trust clearance Hybrid role requiring 4 days onsite in Arlington, VA.

Preferred Skills: Extensive experience with NIST RMF in federal environments. Hands-on knowledge of vulnerability scanning tools (e.g., Nessus), SIEM platforms, and security automation. Oversee enterprise vulnerability scanning operations using tools such as Nessus and agency-approved scanners. Use enterprise security tools (e.g., SIEM platforms, endpoint protection, IDS/IPS) to monitor events and support investigations. Experience leading cybersecurity teams and coordinating with multidisciplinary IT groups.