Federal Vulnerability Lead RMF & Incident Response

NTT DATA Services; Yorktown (VA); Hybrid; USD 103,000 - 210,000; Full time

Benefits offered by this job

Medical, dental, and vision insurance

401k with company match

Paid time off

Job summary

NTT DATA Services in Arlington, VA seeks a Cybersecurity Lead-Vulnerability Management to provide technical leadership and hands-on expertise securing federal information systems in accordance with RMF, FISMA, HIPAA, and agency policies.

Responsibilities include leading full lifecycle NIST RMF activities, coordinating remediation, threat intelligence integration, and audits across cloud, applications, and infrastructure, while guiding a team of cybersecurity engineers and coordinating with IT

Qualifications

• Masters Degree; 1.5 years additional experience can substitute for 1 year of degree.
• Minimum 10 years’ cybersecurity and team lead experience.
• Ability to obtain and maintain a public trust clearance.
• Hybrid role requiring 4 days onsite in Arlington, VA.

Responsibilities

• Lead full lifecycle NIST RMF activities including categorization, control implementation, assessment, POA&M, and ATO sustainment.
• Coordinate with stakeholders to maintain documentation, respond to findings, and support audits and system reviews.
• Review scan results, validate findings, determine criticality, and coordinate remediation with owners and operations teams.
• Develop and maintain processes for continuous monitoring, risk scoring, and reporting to leadership.

Skills

Leadership

Security architecture

Vulnerability management

NIST RMF

Incident response

Threat intelligence

Education

Master's degree

Tools

Nessus

SIEM

Security automation

Job description

NTT DATA Services in Arlington, VA seeks a Cybersecurity Lead-Vulnerability Management to provide technical leadership and hands-on expertise securing federal information systems in accordance with RMF, FISMA, HIPAA, and agency policies.

Responsibilities include leading full lifecycle NIST RMF activities, coordinating remediation, threat intelligence integration, and audits across cloud, applications, and infrastructure, while guiding a team of cybersecurity engineers and coordinating with IT