Note: The job is a remote job and is open to candidates in USA. System One delivers outsourced services and workforce solutions across North America. The Senior Vulnerability Management Engineer/Lead will provide technical leadership for enterprise vulnerability management across NIH/OD-managed environments, including vulnerability identification, risk prioritization, remediation coordination, reporting, compliance, and staff mentoring.
Responsibilities
- Lead enterprise vulnerability management operations and continuous program improvement
- Manage and optimize vulnerability scanning infrastructure and tools
- Oversee credentialed host, network, application, database, and endpoint vulnerability scanning
- Analyze scan results and prioritize vulnerabilities based on risk and federal requirements
- Lead vulnerability discovery, validation, mitigation, remediation tracking, and closure
- Ensure critical vulnerabilities are escalated and tracked through resolution
- Monitor the CISA Known Exploited Vulnerabilities (KEV) Catalog and other authoritative sources
- Coordinate remediation activities with system owners and technical teams
- Provide risk analysis and technical recommendations for identified vulnerabilities
- Support specialized vulnerability assessments for High Value Assets
- Develop reports, dashboards, metrics, and executive briefings
- Ensure reporting complies with NIH, HHS, CISA, FISMA, and HVA requirements
- Improve tool tuning, asset visibility, and reporting accuracy
- Mentor mid-level and junior staff
Skills
- • Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or related field
- • 8–12 years of cybersecurity experience, including at least 5 years in enterprise vulnerability management
- • Experience with Tenable, Qualys, Rapid7, Microsoft Defender Vulnerability Management, or similar tools
- • Knowledge of CVEs, CVSS, KEVs, NIST guidance, FISMA, CISA directives, and federal vulnerability remediation requirements
- • Strong communication and reporting skills
- • CISSP • CISM • GIAC Certified Enterprise Defender (GCED) • GIAC Certified Vulnerability Assessor (GCVA) • CompTIA CySA+ • Tenable Certified Professional • Qualys VMDR Certification
Benefits
- 99% remote work model with occasional onsite meetings
- Eligible employees have health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, and voluntary plans
- Participation in a 401(k) plan
Company Overview
Company H1B Sponsorship