Enterprise Vulnerability Risk Lead

K2United; Washington (District of Columbia); On-site; USD 120,000 - 180,000; Part time

Job summary

K2United seeks a senior Vulnerability Management professional to own and advance an enterprise-wide vulnerability program. You will translate scan output into risk-informed decisions, drive remediation with system owners, and align with risk and compliance activities across the organization.

Ideal candidate has 6+ years in vulnerability management, strong familiarity with Tenable/Qualys/Rapid7, and experience delivering executive-level vulnerability trends and remediation timelines within a

Qualifications

• Bachelor's degree in cybersecurity, information technology, or related field; equivalent experience considered.
• 6+ years in vulnerability management, including 2+ years leading or coordinating an enterprise program.
• Hands-on proficiency with enterprise vulnerability scanning platforms (Tenable, Qualys, Rapid7, MD VM).
• Ability to apply risk-based prioritization beyond CVSS, including exploitability and asset criticality.
• Experience coordinating remediation across organizational boundaries with system owners.
• Experience producing executive-facing vulnerability trend reporting and defensible remediation timelines.

Responsibilities

• Operate vulnerability management as a sustained enterprise function across all in-scope assets.
• Analyze vulnerability data, scan results, remediation status, and related findings to enable risk-based decisions.
• Coordinate remediation with system owners; assist in evaluating actions, timelines, and residual risk.
• Identify aging vulnerabilities and systemic issues; recommend process improvements.
• Lead recurring vulnerability review meetings with stakeholders to review status and plan remediation.
• Produce periodic reporting covering severity, age, trend, and system status.

Skills

Vulnerability management

Risk-based prioritization

Executive reporting

Cross-functional collaboration

Security data analysis

Education

Bachelor's degree in cybersecurity or IT

Tools

Tenable

Qualys

Rapid7

Microsoft Defender Vulnerability Management

Job description

K2United seeks a senior Vulnerability Management professional to own and advance an enterprise-wide vulnerability program. You will translate scan output into risk-informed decisions, drive remediation with system owners, and align with risk and compliance activities across the organization.

Ideal candidate has 6+ years in vulnerability management, strong familiarity with Tenable/Qualys/Rapid7, and experience delivering executive-level vulnerability trends and remediation timelines within a