Enterprise Vulnerability Management Lead

K2United, LLC.; Washington (District of Columbia); On-site; USD 130,000 - 170,000; Full time

Job summary

K2United, LLC is seeking a senior vulnerability management professional to own enterprise vulnerability management as a sustained program function across systems, applications, devices, and other in-scope assets.

You will convert scan output into risk-informed decisions, drive remediation with stakeholders, and provide monthly reporting and trend analysis to support risk management at the federal level within a mission-driven, small-business environment.

Qualifications

• Bachelor's degree or equivalent experience in cybersecurity, IT, or related field.
• Six or more years in vulnerability management with enterprise scope.
• Hands-on with vulnerability scanning platforms (Tenable/Qualys/Rapid7).
• Experience applying risk-based prioritization beyond CVSS.
• Experience coordinating remediation with cross-organization stakeholders.

Responsibilities

• Operate vulnerability management as a sustained enterprise function across all in-scope assets.
• Analyze vulnerability data, scan results, remediation status and findings for risk-based decisions.
• Coordinate remediation with system owners and stakeholders; evaluate timelines and residual risk.
• Identify aging vulnerabilities and systemic issues; recommend process improvements.
• Lead recurring vulnerability review meetings with stakeholders; support remediation planning.
• Produce periodic reporting covering severity, age, trend, and system-status.

Skills

Risk-based prioritization

Executive reporting

Cross-functional coordination

Vulnerability management

NIST controls

Education

Bachelor's degree in cybersecurity, information technology, or related field

Equivalent experience

Tools

Tenable

Qualys

Rapid7

Microsoft Defender Vulnerability Management

Job description

K2United, LLC is seeking a senior vulnerability management professional to own enterprise vulnerability management as a sustained program function across systems, applications, devices, and other in-scope assets.

You will convert scan output into risk-informed decisions, drive remediation with stakeholders, and provide monthly reporting and trend analysis to support risk management at the federal level within a mission-driven, small-business environment.