Cybersecurity Lead-Vulnerability management

NTT DATA, Inc.; Oregon; Hybrid; USD 150,000 - 190,000; Full time

Job summary

NTT DATA, Inc. is seeking a Senior Vulnerability Management Lead to provide technical leadership and hands-on expertise in securing federal information systems in line with RMF, FISMA, and HIPAA.

You will oversee vulnerability management operations, lead incident response planning, and ensure ongoing security compliance to support ATO maintenance. Collaborate with cross-functional IT teams to strengthen cybersecurity posture, drive proactive remediation, and implement enterprise security

Qualifications

• Master's degree required or higher with relevant security focus.
• 10+ years of cybersecurity and team-lead experience in federal environments preferred.
• Ability to obtain and maintain a public trust clearance.
• Hybrid role requiring 4 days onsite in Arlington, VA.

Responsibilities

• Lead full lifecycle NIST RMF activities including categorization, control implementation, assessment, POA&M management, and ATO sustainment.
• Ensure compliance with FISMA, HIPAA, and agency-specific security policies.
• Coordinate with stakeholders to maintain documentation, findings, and audits.
• Review scan results, validate findings, determine criticality, and coordinate remediation with owners and operations teams.
• Develop and maintain processes for continuous monitoring, risk scoring, and leadership reporting.
• Integrate threat intelligence to identify risks and drive mitigation strategies.
• Support security audits, penetration tests, and secure configuration enforcement.
• Lead coordination with internal teams and government stakeholders for proper reporting.
• Conduct post-incident reviews and improve incident response plans.

Skills

NIST RMF

Vulnerability scanning

SIEM

Security automation

Team leadership

Education

Master's Degree

Tools

Nessus

SIEM platforms

IDS/IPS

Endpoint protection

Job description

NTT DATA strives to hire exceptional, innovative and passionate individuals who want to grow with us. If you want to be part of an inclusive, adaptable, and forward-thinking organization, We are currently seeking a Cybersecurity Lead-Vulnerability management to join our team in Arlington, Virginia (US-VA), United States (US).

Job Summary

The Senior Vulnerability Management Lead provides technical leadership and hands-on expertise to secure federal information systems in accordance with NIST Risk Management Framework (RMF), FISMA, HIPAA, and agency-specific requirements. This role oversees vulnerability management operations, leads incident response planning and execution, and ensures continuous security compliance to support Authorization to Operate (ATO) maintenance. Working closely with cross-functional IT teams, the Team Lead strengthens cybersecurity posture through proactive threat mitigation, audit readiness, and the implementation of enterprise security controls.

Responsibilities

• Lead full lifecycle NIST RMF activities, including categorization, control implementation, security assessment, POA&M management, and ATO sustainment.
• Ensure compliance with federal security standards such as FISMA, HIPAA, and agency-specific security policies.
• Coordinate with assessment and authorization stakeholders to maintain documentation, respond to findings, and support audits and system reviews.
• Review scan results, validate findings, determine criticality, and coordinate remediation with system owners and operations teams.
• Develop and maintain processes for continuous monitoring, risk scoring, and reporting to leadership.
• Integrate threat intelligence platforms to identify emerging risks and drive proactive mitigation strategies.
• Support security audits, penetration tests, and secure configuration enforcement.
• Lead coordination with internal security teams, IT operations, legal/compliance, and government stakeholders to ensure proper handling, documentation, and reporting.
• Conduct post-incident reviews and improve incident response plans and playbooks.
• Guide the implementation and maintenance of security controls across infrastructure, applications, and cloud environments.
• Provide expertise in secure architecture, configuration management, identity and access management, and audit log review.
• Analyze system changes for security impacts and support change control processes.
• Drive continuous improvement, standardization, and security optimization across the program.
• Supervise cybersecurity engineers and specialists, providing mentorship, task direction, and performance oversight.
• Facilitate collaboration with network, server, cloud, and application teams to ensure timely vulnerability remediation and control implementation.
• Support program-level coordination activities, including reporting, stakeholder briefings, and cross-team integration efforts.

Qualifications

• Masters Degree, One-and-one-half (1.5) years of additional experience can substitute for one (1) year of a typical degree program.
• Minimum 10 years' experience performing the cybersecurity and team lead tasks/responsibilities listed above
• Ability to obtain and maintain a public trust clearance
• Hybrid role requiring 4 days onsite in Arlington, VA.

Preferred Skills

• Extensive experience with NIST RMF in federal environments.
• Hands-on knowledge of vulnerability scanning tools (e.g., Nessus), SIEM platforms, and security automation.
• Oversee enterprise vulnerability scanning operations using tools such as Nessus and agency-approved scanners.
• Use enterprise security tools (e.g., SIEM platforms, endpoint protection, IDS/IPS) to monitor events and support investigations.
• Experience leading cybersecurity teams and coordinating with multidisciplinary IT groups.