Exposure-Driven Vulnerability Management Lead

Cherokee Federal; Glenpool (OK); On-site; USD 130,000 - 190,000; Full time

Job summary

Cherokee Federal is seeking a Cybersecurity Vulnerability Management Team Lead to guide enterprise vulnerability management across on-premises, cloud, and hybrid environments. The role emphasizes transforming traditional scanning into a proactive, threat-informed exposure management capability.

The candidate will lead a team of analysts, partner with Security Operations, Cloud Engineering, and DevSecOps, and develop a roadmap that reduces risk through detection engineering, validation, and

Qualifications

• 8+ years of cybersecurity experience.
• 4+ years in Vulnerability Management in a federal or large enterprise environment.
• 3+ years leading vulnerability analysts, remediation programs, or enterprise VM initiatives.
• Hands-on with Tenable.sc, Tenable.io, Nessus.
• Experience with ServiceNow Vulnerability Response and CMDB integrations.
• Experience leveraging modern vulnerability prioritization methodologies (CISA KEV, EPSS, threat intelligence).
• Experience supporting AWS, Azure, or hybrid cloud environments.

Responsibilities

• Lead and mature NSF's Vulnerability Management capability across enterprise, cloud, containerized, application, and hybrid environments.
• Provide technical leadership to a team of vulnerability analysts and establish a culture of accountability and collaboration.
• Develop and maintain a Vulnerability Management roadmap aligned with evolving threats and priorities.
• Introduce and operationalize modern vulnerability prioritization techniques (KEV, EPSS, threat intel, asset criticality).
• Own end-to-end vulnerability management processes: discovery, validation, prioritization, remediation coordination, verification, executive reporting.
• Operate and optimize enterprise scanning platforms (Tenable.sc, Tenable.io, Nessus).
• Partner with AppSec and DevSecOps teams to support CI/CD integrations and container image scanning.
• Mature ServiceNow Vulnerability Response capabilities including CMDB enrichment and automated ticketing.

Skills

Leadership

Vulnerability management

Threat-informed prioritization

Executive reporting

Cross-functional collaboration

Tools

Tenable.sc

Tenable.io

Nessus

ServiceNow

Job description

Cherokee Federal is seeking a Cybersecurity Vulnerability Management Team Lead to guide enterprise vulnerability management across on-premises, cloud, and hybrid environments. The role emphasizes transforming traditional scanning into a proactive, threat-informed exposure management capability.

The candidate will lead a team of analysts, partner with Security Operations, Cloud Engineering, and DevSecOps, and develop a roadmap that reduces risk through detection engineering, validation, and