Mid-Level Continuous Diagnostics and Mitigation Engineer

K2United

CDM Engineer implementing and enhancing the Continuous Diagnostics and Mitigation program. Supporting cybersecurity posture for federal health-sector client across hybrid environments with on-premises and cloud systems.

Posted 7/17/2026contractMaryland • 🇺🇸 United StatesMid-LevelSenior💰 $80,000 - $105,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Continuous Diagnostics and Mitigation (CDM) capabilities, enterprise vulnerability management, and compliance with federal cybersecurity standards. Proficient in analyzing vulnerabilities, managing scanning infrastructure, and collaborating with stakeholders to enhance security operations.

Highest-signal resume keywords

Continuous Diagnostics And Mitigation (CDM)Enterprise Vulnerability ManagementVulnerability Scanning PlatformsFISMA ComplianceNIST SP 800-53 Rev. 5

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Vulnerability AnalysisCredentialed ScanningAsset ManagementConfiguration MonitoringRisk Management Framework (RMF)Security OperationsCompliance ReportingIncident ResponseCybersecurity Posture ImprovementRemediation Recommendations

Soft Skills

Analytical SkillsCommunication SkillsCollaboration Skills

Industry Keywords

CISA Known Exploited Vulnerabilities (KEV) CatalogBinding Operational DirectivesDHS CDM ProgramOngoing AuthorizationHybrid Environments

Tech Stack

Tools & technologies

CloudCyber Security

About the role

Key responsibilities & impact

Implement, operate, and maintain Continuous Diagnostics and Mitigation (CDM) capabilities that strengthen enterprise cybersecurity posture
Maintain the CDM scanning infrastructure supporting client systems across on-premises, cloud, and hybrid environments
Partner with technical stakeholders to expand and mature CDM capabilities as the environment evolves through modernization and cloud adoption
Support the transition to Ongoing Authorization by providing continuous monitoring and security visibility
Deliver continuous asset visibility and improve detection of vulnerabilities, configuration issues, unmanaged assets, and unauthorized software or hardware
Manage enterprise vulnerability scanning infrastructure, including credentialed scanning across systems, devices, and applications
Analyze vulnerability scan results, prioritize risk, and provide actionable remediation recommendations
Monitor the CISA Known Exploited Vulnerabilities (KEV) Catalog and other authoritative guidance to support timely remediation and compliance with applicable Binding Operational Directives
Support enterprise asset inventory, configuration monitoring, and compliance reporting activities
Collaborate with the client and department stakeholders, system owners, administrators, and technical teams to improve security operations, optimize tools, and support incident response activities
Contribute data and analysis supporting executive cybersecurity reporting, including weekly CIO dashboards and ad hoc vulnerability reports
Produce and maintain required CDM deliverables, including CDM Scan Results on the DHS-defined periodicity of no less than every three days, CDM Mitigation Procedures documenting mitigation steps and end-user mitigation activities when requested, and compliance reporting

Requirements

What you’ll need

Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or a related field, or equivalent professional experience
Five or more years of experience supporting enterprise vulnerability management, Continuous Diagnostics and Mitigation (CDM), or security operations
Experience administering enterprise vulnerability scanning platforms and supporting credentialed scanning across large hybrid environments
Working knowledge of the DHS Continuous Diagnostics and Mitigation (CDM) program, including asset management, configuration monitoring, reporting, and CDM dashboard concepts
Familiarity with FISMA, FIPS 199, NIST SP 800-53 Rev. 5, Risk Management Framework (RMF), and continuous monitoring supporting Ongoing Authorization
Experience managing vulnerabilities in accordance with the CISA Known Exploited Vulnerabilities (KEV) Catalog and applicable CISA Binding Operational Directives
Strong analytical, communication, and collaboration skills with the ability to work effectively across technical and customer organizations
Ability to satisfy federal background investigation requirements and complete required onboarding before receiving system access
U.S. work authorization

Benefits

Comp & perks

401(k) with employer matching
Low-cost medical coverage for employees and their families
Paid time off
Paid leave for jury duty, military service, voting, and other qualifying events
Wellness stipend, including fitness reimbursement
Tuition assistance
Casual work environment
Technical training and certification support
Complimentary access to CareerSafe online training courses for employees and their immediate family