Cybersecurity Operations Consultant

Jobtailor; Maryland; On-site; USD 110,000 - 140,000; Full time

Benefits offered by this job

Health insurance

Job summary

Jobtailor seeks a security-focused professional to lead vulnerability management and secure configuration, aligning with federal mandates. You will monitor NIH/HHS systems with Invicti, develop risk-based prioritization, and drive remediation with cross‑functional teams.

Responsibilities include creating CIS-aligned baselines, tracking patch timelines, and reporting to leadership and oversight bodies. Strong communication and multitasking abilities are essential.

Qualifications

• Must have at least a bachelor’s degree.
• Hands‑on Invicti experience.
• Deep understanding of NIST SP 800-53 and FISMA requirements.
• Active CompTIA Security+ CE preferred; other certifications a plus.
• Ability to obtain and maintain a Federal or DoD Public Trust adjudication prior to onboarding.
• Prefer candidates with an active Public Trust or suitability and an HHS/NIH clearance.

Responsibilities

• Lead vulnerability management and secure configuration operations per federal mandates.
• Monitor, report, and coordinate remediation across NIH/HHS systems using Invicti.
• Develop risk-based vulnerability prioritization models.
• Create secure configuration baselines aligned with CIS Benchmarks.
• Ensure patching timelines meet federal directives.
• Collaborate with infrastructure, application, and security teams on remediation validation.
• Assist in preparing leadership and federal oversight reports.
• Develop KPIs for vulnerability and compliance gap tracking.

Skills

Communication

Analytical thinking

Multitasking

Project management

Education

Bachelor's degree

Tools

Invicti

Job description

Responsibilities

• Lead vulnerability management and secure configuration operations, ensuring alignment with federal cybersecurity mandates.
• Manage, monitor, and report vulnerabilities across NIH/HHS systems using tools such as Invicti and coordinate timely remediation activities.
• Develop vulnerability prioritization models based on risk, exposure, and asset criticality.
• Develop secure configuration baselines and monitoring processes based on CIS Benchmarks.
• Ensure compliance with patching timelines and federal vulnerability directives.
• Collaborate with infrastructure, application, and security teams to validate remediation actions.
• Support preparation of reports for leadership and federal oversight bodies.
• Develop KPI metrics for vulnerability and compliance gap closure rates, asset risk scoring, and compliance tracking.

Requirements

• Must be able to OBTAIN and MAINTAIN a Federal or DoD "PUBLIC TRUST"; candidates must obtain approved adjudication of their PUBLIC TRUST prior to onboarding with Guidehouse.
• Candidates with an ACTIVE PUBLIC TRUST or SUITABILITY and maintain an active HHS/NIH clearance are preferred.
• Minimum of THREE (3) years of cybersecurity or IT risk management experience, candidates with experience focused on vulnerability management and/or secure configuration are preferred.
• Minimum of a Bachelors Degree is required.
• Hands‑on experience with Invicti.
• Deep understanding of NIST SP 800-53 and FISMA requirements.
• Active CompTIA Security+ CE preferred.
• Other certifications (CISSP, CEH, or cloud-related) are a plus.
• Strong communication and analytical thinking; ability to manage multiple concurrent priorities and deadlines.