Security Engineer - Vulnerability Management
Core
Manage and enhance the organization's vulnerability management program to support IT systems in achieving compliance for formal Controls Assessments.
Role type
Senior IC security engineer (vulnerability management)
Builds
Security posture improvements, ATO readiness for new systems, compliance artifacts
Domain
US Federal Government / Cybersecurity
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Vulnerability management, risk prioritization, security control validation, patch management, configuration hardening, incident response support, federal compliance frameworks, cloud security, identity provider management
Preferred skills
Exploit framework usage, cloud security tool integration, configuration assessment tools, threat intelligence correlation, SIEM log analysis
Technologies
Tenable Nessus, Qualys, Rapid7, OpenVAS, Metasploit, AWS, Azure, GCP, Splunk, QRadar, SCAP, CIS-CAT
Responsibilities
Identify, assess, and prioritize vulnerabilities across applications, networks, endpoints, cloud environments, and enterprise systems; Collaborate with ISSOs and Controls Assessors to capture RMF artifacts and validate security control effectiveness; Review, advise, and refine security Control Statements to ensure systems are hardened and accurately represented in assessment documentation; Support compliance with federal frameworks including NIST 800‑53, FISMA, and SOX; Implement best practices for vulnerability management, patching, configuration hardening, and risk reduction; Assist in incident response activities involving exploited vulnerabilities, providing risk assessment and remediation guidance; Establish repeatable vulnerability workflows and processes to support ATO readiness for new systems
Seniority
Mid-Senior, hands-on IC