Exposure-Driven Vulnerability Management Lead

Cherokee Federal; Almont (CO); On-site; USD 140,000 - 190,000; Full time

Job summary

Cherokee Federal is seeking an experienced Cybersecurity Vulnerability Management Team Lead to modernize the NSF Cybersecurity Program. You will lead a team, shape a threat-informed exposure management capability, and partner across Security Operations, Cloud Engineering, and DevSecOps to reduce risk.

The role emphasizes leadership, innovation, and the ability to implement advanced prioritization, validation, and automation across enterprise, cloud, and container environments.

Qualifications

• 8+ years of cybersecurity experience.
• 4+ years direct Vulnerability Management in a federal or large enterprise environment.
• 3+ years leading vulnerability analysts, remediation programs, or enterprise VM initiatives.
• Hands-on with Tenable.sc, Tenable.io, and Nessus.
• Experience implementing or improving a VM/Exposure Management capability.
• Experience with ServiceNow Vulnerability Response and CMDB integrations.
• Experience with KEV, EPSS, threat intelligence, asset criticality, and attack path analysis.
• Experience supporting AWS, Azure, or hybrid cloud environments.

Responsibilities

• Lead and mature NSF's Vulnerability Management capability across enterprise, cloud, containerized, application, and hybrid environments.
• Provide technical leadership to a team of vulnerability analysts and establish a culture of accountability and continuous improvement.
• Develop and maintain a Vulnerability Management roadmap aligned with evolving threats and priorities.
• Introduce modern prioritization techniques utilizing KEV, EPSS, threat intel, and asset criticality.
• Operate and optimize scanning platforms including Tenable.sc, Tenable.io, and Nessus.
• Integrate findings from cloud security tools and partner with DevSecOps for CI/CD integrations.
• Mature ServiceNow Vulnerability Response capabilities and develop automation via APIs and scripting.
• Build executive dashboards on MTTR, SLA, vulnerability aging, exposure trends, and remediation effectiveness.

Skills

Vulnerability Management

Threat intelligence

Detection engineering

Cloud security

Incident response coordination

Tools

Tenable.sc

Tenable.io

Nessus

Job description

Cherokee Federal is seeking an experienced Cybersecurity Vulnerability Management Team Lead to modernize the NSF Cybersecurity Program. You will lead a team, shape a threat-informed exposure management capability, and partner across Security Operations, Cloud Engineering, and DevSecOps to reduce risk.

The role emphasizes leadership, innovation, and the ability to implement advanced prioritization, validation, and automation across enterprise, cloud, and container environments.