Federal IT Vulnerability & Remediation Lead

OCT Consulting, LLC; Maryland; On-site; USD 110,000 - 130,000; Full time

Benefits offered by this job

Medical, Dental, Vision insurance

401K with employer contributions

Paid Time Off

Life Insurance

Disability benefits

Training Benefits

Job summary

OCT Consulting, LLC is seeking an Associate to join our Cybersecurity practice as an IT Security Vulnerability Specialist, based in Suitland, MD. The role supports a federal client in a hybrid model, requiring at least three days onsite per week. Responsibilities include remediation leadership, vulnerability assessments, and policy development.

The ideal candidate has 7+ years in A&A, strong NIST RMF knowledge, and certifications such as CISSP or GIAC, with a US citizenship and SECRET clearance.

Qualifications

• 7+ years of experience with A&A support.
• Proficient in all steps in the NIST RMF framework.
• Knowledgeable in NIST SP 800-53 & 800-53A.
• Bachelor's degree or equivalent experience.
• Hands-on with multiple vulnerability scanning platforms, including STIG and CIS benchmarks.
• MS Excel proficiency.
• GIAC GEVA, CASP, CAP, CISSP, CISM, GSEC, GMON, or Security+ certification.
• Must be a US Citizen.
• SECRET clearance required.

Responsibilities

• Lead and drive remediation efforts within government environments to improve vulnerability management efficiency.
• Articulate risk and impact to product and leadership to justify remediation priorities.
• Conduct internal vulnerability assessments and analyze external reports, zero-day events, and security incidents.
• Monitor vulnerability management tools, scans, and configurations.
• Develop, maintain, and enforce security policies and standards for vulnerability management.
• Participate in audits and assessments to ensure regulatory compliance.
• Create reports and dashboards to drive remediation efforts and improvements.
• Support security operations including detection and response.
• Contribute to Security Incident response and configuration management guidance.

Skills

Vulnerability Management

Intrusion Detection

Access Control

Policy Enforcement

Application Security

Incident Response

Data Loss Prevention

Encryption

Two-Factor Authentication

Education

Bachelor's degree or equivalent

Tools

Vulnerability Scanners

STIG

CIS Benchmarks

Job description

OCT Consulting, LLC is seeking an Associate to join our Cybersecurity practice as an IT Security Vulnerability Specialist, based in Suitland, MD. The role supports a federal client in a hybrid model, requiring at least three days onsite per week. Responsibilities include remediation leadership, vulnerability assessments, and policy development.

The ideal candidate has 7+ years in A&A, strong NIST RMF knowledge, and certifications such as CISSP or GIAC, with a US citizenship and SECRET clearance.