Federal Cybersecurity Consultant: Vulnerability Management

Guidehouse; Bloomington (IL); On-site; USD 90,000 - 130,000; Full time

Job summary

Guidehouse seeks a cybersecurity professional to lead vulnerability management for a portfolio of client applications, coordinating remediation efforts with business, engineering, and security teams. You will support POA&M activities and ensure timely remediation in line with federal requirements.

You will develop automated vulnerability reports, dashboards, KPIs, and metrics to monitor progress and asset risk, while preparing briefings for leadership and oversight authorities.

Qualifications

• Three years of cybersecurity or IT risk management experience.
• Experience in vulnerability management or secure configuration preferred.
• Bachelor's degree required.
• Active CompTIA Security+ CE preferred; CISSP, CEH, or cloud-related certifications are a plus.

Responsibilities

• Lead vulnerability management across a portfolio of client applications, including analyzing findings and tracking remediation through closure.
• Build relationships with business, engineering, and security teams to validate fixes and resolve blockers.
• Support POA&M activities, patching timelines and compliance requirements.
• Develop automated vulnerability reports, dashboards, KPIs, and metrics to track remediation progress.
• Prepare reports for leadership and federal oversight stakeholders.

Skills

Vulnerability management

Security risk assessment

Strong communication

Analytical thinking

Project coordination

Education

Bachelor's degree

Tools

Invicti

Splunk

Jira

Confluence

Job description

Guidehouse seeks a cybersecurity professional to lead vulnerability management for a portfolio of client applications, coordinating remediation efforts with business, engineering, and security teams. You will support POA&M activities and ensure timely remediation in line with federal requirements.

You will develop automated vulnerability reports, dashboards, KPIs, and metrics to monitor progress and asset risk, while preparing briefings for leadership and oversight authorities.