Enterprise Vulnerability Management Lead

Steampunk, Inc.; McLean (VA); On-site; USD 125,000 - 175,000; Full time

Job summary

Steampunk is seeking a Vulnerability Management Lead to plan, execute, and mature a large-scale program supporting 30,000+ assets across servers, workstations, HPC, cloud, and network devices. The role partners with cybersecurity operations, infrastructure, cloud, and system owners to drive risk-based remediation and reporting.

The ideal candidate develops automation, dashboards, and processes aligned with NIST SP 800-53 and federal directives, enabling data-driven decisions and executive

Qualifications

• Ability to obtain and maintain a U.S. government Security Clearance.
• Bachelor's degree in cybersecurity/IT/CS/IS or related field.
• Minimum of 5 years hands-on experience supporting enterprise vulnerability management, cybersecurity operations, and risk remediation workflows.
• Experience managing vulnerability programs across more than 30,000 assets including servers, workstations, HPC, cloud workloads, and network devices per BOD 22-01.
• Experience collaborating with service areas, system owners, cloud admins, cybersecurity engineers, and infrastructure teams to identify, prioritize, and track remediation efforts.
• Experience developing risk-based prioritization using exploitability, threat intel, asset criticality, and business impact.
• Experience leveraging automation and AI/ML to improve vulnerability management.
• Experience developing dashboards and metrics using Power BI/Power Apps/SharePoint.
• Strong knowledge of NIST SP 800-53 and federal directives.
• Strong communication skills across technical and executive stakeholders.

Responsibilities

• Lead the enterprise vulnerability management program across servers, workstations, HPC, cloud, and network devices (>30,000 assets).
• Plan, coordinate, and oversee vulnerability scanning, assessment, prioritization, remediation tracking, validation, and reporting.
• Collaborate with service areas, system owners, cloud admins, cybersecurity engineers, and infrastructure teams to track remediation efforts.
• Develop risk-based prioritization methodologies using exploitability, threat intel, asset criticality, and business impact.
• Drive remediation activities aligned with BOD 22-01 and organizational security requirements.
• Develop and enhance vulnerability management processes, SOPs, and automation roadmaps.
• Design automation solutions to improve data collection, remediation tracking, reporting, and efficiency.
• Utilize AI/ML to improve scan integration, prioritization, reporting, and risk trend prediction.
• Develop dashboards and weekly reporting using Power BI, Power Apps, SharePoint, and heat-map visualizations.
• Identify opportunities to improve tools, processes, and data flows within the program.
• Support continuous monitoring and strengthen cybersecurity posture.
• Stay current on vulnerabilities, threat intel, and federal directives.

Skills

Analytical skills

Written and verbal communication

Cross-functional collaboration

Program management

Security clearance eligibility

Education

Bachelor's degree in Cybersecurity, IT, CS, or related field

Tools

Power BI

Power Apps

SharePoint

Automation tooling

Threat intelligence platforms

Job description

Steampunk is seeking a Vulnerability Management Lead to plan, execute, and mature a large-scale program supporting 30,000+ assets across servers, workstations, HPC, cloud, and network devices. The role partners with cybersecurity operations, infrastructure, cloud, and system owners to drive risk-based remediation and reporting.

The ideal candidate develops automation, dashboards, and processes aligned with NIST SP 800-53 and federal directives, enabling data-driven decisions and executive