Lead vulnerability management efforts across a portfolio of client applications
Build and maintain strong working relationships with business, engineering, and security teams
Support POA&M activities, patching timelines, remediation deadlines, and related federal cybersecurity and compliance requirements
Develop and maintain automated vulnerability reports, dashboards, KPIs, and metrics
Prepare reports and briefings for leadership and federal oversight stakeholders
Monitor suspicious activity and security alerts in Splunk
Support secure development efforts through security documentation and secure coding guidance
Provide cyber subject matter expertise during information security audits and assessments

Requirements

Minimum of THREE (3) years of cybersecurity or IT risk management experience
Minimum of a Bachelors Degree is required
Hands-on experience with Invicti, Splunk, and Atlassian tools (Jira & Confluence)
Deep understanding of NIST SP 800-53, FISMA requirements, and OWASP Top 10
Active CompTIA Security+ CE preferred; CISSP, CEH, or cloud-related certifications are a plus
Strong communication and analytical thinking; ability to manage multiple concurrent priorities and deadlines

Benefits

Medical, Rx, Dental & Vision Insurance
Personal and Family Sick Time & Company Paid Holidays
Position may be eligible for a discretionary variable incentive bonus
Parental Leave and Adoption Assistance
401(k) Retirement Plan
Basic Life & Supplemental Life
Health Savings Account, Dental/Vision & Dependent Care Flexible Spending Accounts
Short-Term & Long-Term Disability
Student Loan PayDown
Tuition Reimbursement, Personal Development & Learning Opportunities
Skills Development & Certifications
Employee Referral Program
Corporate Sponsored Events & Community Outreach
Emergency Back-Up Childcare Program
Mobility Stipend

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

vulnerability managementautomated vulnerability reportssecurity documentationsecure codingcybersecurity auditsIT risk managementpatching timelinesremediation deadlinesKPI developmentmetrics analysis

Soft Skills

communicationanalytical thinkingrelationship buildingprioritizationdeadline management

Certifications

CompTIA Security+ CECISSPCEH