Cybersecurity Vulnerability Management Team Lead

This is a fully remote position, open to applicants in United States.

📋 Description

• Lead and enhance NSF’s vulnerability management capabilities across enterprise, cloud, containerized, application, and hybrid environments.

• Provide technical guidance to vulnerability analysts while promoting accountability, ownership, collaboration, and continuous improvement.

• Develop and sustain a vulnerability management roadmap that aligns with evolving threats and organizational priorities.

• Utilize CISA KEV, EPSS, threat intelligence, asset criticality, internet-facing asset identification, attack path analysis, and MITRE ATT&CK mapping to prioritize vulnerabilities.

• Assess emerging technologies that enhance vulnerability validation, attack surface visibility, and exposure management.

• Promote exposure reduction, detection engineering, continuous validation, cloud-native security, and automation.

• Manage discovery, validation, prioritization, remediation coordination, exception handling, verification, and executive reporting.

• Operate and optimize Tenable.sc, Tenable.io, and Nessus.

• Enhance scan coverage, credential management, accuracy, and reduction of false positives.

• Integrate insights from AWS Inspector, Security Hub, GuardDuty, Wiz, Prisma Cloud, and Microsoft Defender for Cloud.

• Collaborate with Application Security and DevSecOps teams on AppScan, DAST, SAST, CI/CD integrations, and container image scanning.

• Advance ServiceNow Vulnerability Response through CMDB enrichment, automated ticket creation, SLA tracking, ownership assignment, and escalation workflows.

• Identify and build automation opportunities using APIs, Python, PowerShell, and orchestration capabilities.

• Create executive dashboards covering MTTR, SLA adherence, vulnerability aging, exposure trends, scan coverage, and remediation effectiveness.

• Update cybersecurity leadership on emerging risks, remediation progress, and program maturity.

• Provide technical leadership to a small team of vulnerability analysts.

• Carry out other job-related responsibilities as assigned.

⛳️ Requirements

• Over 8 years of experience in cybersecurity.

• More than 4 years of direct experience in vulnerability management within a federal or large enterprise setting.

• At least 3 years of experience leading vulnerability analysts, remediation programs, or enterprise vulnerability management initiatives.

• Extensive hands-on expertise with Tenable.sc, Tenable.io, and Nessus.

• Proven experience in implementing or significantly improving a Vulnerability Management or Exposure Management capability.

• Familiarity with ServiceNow Vulnerability Response and CMDB integrations.

• Experience in utilizing CISA KEV, EPSS, threat intelligence, asset criticality, and attack path analysis for vulnerability prioritization.

• Background in supporting AWS, Azure, or hybrid cloud environments.

• Experience working alongside Security Operations and Incident Response teams to identify and swiftly remediate actively exploited vulnerabilities.

• Proficient in briefing technical teams, executives, and federal stakeholders.

• Ability to endure prolonged periods of sitting at a desk and working on a computer; may occasionally require standing or moving about the office for extended durations.

• Must successfully pass the pre-employment qualifications of Cherokee Federal.

• Preferred certifications and experience include SafeBreach, AttackIQ, Pentera, XM Cyber, Wiz, Prisma Cloud, AppScan, BAS, CCV, EASM, Kubernetes security, detection engineering, CISSP, GCIH, CySA+, Security+, Tenable Certified Professional, AWS Security Specialty, and ServiceNow Vulnerability Response Certification.

🏝️ Benefits

• Up to a 6% 401(k) company match.

• Paid time off.

• Medical, dental, and vision insurance, along with prescription drug coverage.

• Basic life and AD&D insurance, with options for supplemental life insurance.

• Coverage for short-term and long-term disability.

• Paid holidays.

• Employee Assistance Program (EAP).

• Options for Flexible Spending Account (FSA) and Health Savings Account (HSA).

• Support for professional development, training, and certification.

• Voluntary options for accident, critical illness, and identity theft protection.