Enterprise Vulnerability & RMF Lead

Booz Allen; Washington (District of Columbia); On-site; USD 99,000 - 225,000; Full time

Job summary

Booz Allen is seeking a Vulnerability Management Lead to support DoD clients, modernizing ACAS capabilities and designing enterprise-scale STIG compliance solutions. You will serve as a trusted advisor and technical lead for risk management and continuous monitoring.

Responsibilities include leading automation, policy standardization, and integration with RMF, ATO processes, and reporting to executives. TS/SCI clearance and DoD experience are required, with opportunities to shape Zero Trust

Qualifications

• Experience leading vulnerability management programs in enterprise environments.
• Experience with ACAS/ Tenable.sc or Nessus in DoD/IC contexts.
• Knowledge of RMF, NIST 800-53, POA&M and continuous monitoring.

Responsibilities

• Lead ACAS modernization efforts from basic scanning to enterprise vulnerability management.
• Standardize scan policies, credentialed coverage, asset tagging and data hygiene.
• Design contractor-operated workflows for vulnerability intake, remediation tracking, and risk acceptance.
• Integrate ACAS outputs into POA&M, ATO sustainment, and reporting.

Skills

Vulnerability management

IaC automation

DoD/IC cybersecurity programs

Education

Bachelor’s degree, IT or related field

Associate’s degree

Master’s degree

Tools

ACAS (Tenable.sc)

Nessus

SCC

OpenSCAP

Job description

Booz Allen is seeking a Vulnerability Management Lead to support DoD clients, modernizing ACAS capabilities and designing enterprise-scale STIG compliance solutions. You will serve as a trusted advisor and technical lead for risk management and continuous monitoring.

Responsibilities include leading automation, policy standardization, and integration with RMF, ATO processes, and reporting to executives. TS/SCI clearance and DoD experience are required, with opportunities to shape Zero Trust