Vulnerability Management Specialist — Federal RMF & POA&M

Remotedxb; Dubai; On-site; AED 240,000 - 360,000; Full time

Benefits offered by this job

Comprehensive medical, dental, and视s

Flexible Spending Account and HealthS

Retirement 401(k) with employer match

Open leave policy and paid holidays

Tuition reimbursement and employeeass

Job summary

Copper River Family of Companies is seeking a vulnerability management professional to assess and prioritize threats across NIH information systems. You will work with technical teams to drive remediation and track POA&Ms.

The role emphasizes experience in federal cybersecurity, NIST RMF, and the ability to obtain NIH Public Trust, with strong reporting and dashboard development for leadership.

Qualifications

• Bachelor’s degree in cybersecurity, computer science, IT, or engineering.
• Minimum 5 years in cybersecurity or vulnerability management in Federal environments.
• Experience with POA&Ms development and remediation tracking.
• Familiarity with NIST RMF (SP 800-37), NIST SP 800-53 Rev. 5, and FISMA.
• Ability to obtain and maintain NIH Public Trust.

Responsibilities

• Perform vulnerability assessments and analysis across NIH information systems and infrastructure.
• Prioritize threats using exploitability, threat intelligence, and CISA KEV.
• Develop vulnerability dashboards, remediation metrics, and executive reporting.
• Review and analyze vulnerability scan results from enterprise security tools.
• Coordinate with technical teams to assess remediation requirements and timelines.
• Manage the full lifecycle of vulnerability identification, remediation, and closure.
• Support continuous monitoring and RMF/A&A activities.
• Assist with the management and tracking of POA&Ms.

Education

Bachelor's degree in Cybersecurity, Computer Science, IT, or Engineering

Job description

Copper River Family of Companies is seeking a vulnerability management professional to assess and prioritize threats across NIH information systems. You will work with technical teams to drive remediation and track POA&Ms.

The role emphasizes experience in federal cybersecurity, NIST RMF, and the ability to obtain NIH Public Trust, with strong reporting and dashboard development for leadership.