Mid-Level Continuous Diagnostics and Mitigation Engineer

Jobtailor; Maryland; On-site; USD 120,000 - 160,000; Full time

Job summary

Jobtailor is seeking a seasoned cybersecurity professional in Maryland to implement and maintain CDM capabilities across on-premises, cloud, and hybrid environments. You will partner with technical stakeholders to mature CDM, support ongoing authorization, and deliver continuous asset visibility to strengthen security posture.

The role requires five+ years in vulnerability management or CDM, familiarity with DHS CDM program, and experience with KEV Catalog and NIST RMF.

Qualifications

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or a related field, or equivalent professional experience.
• Five or more years of experience supporting enterprise vulnerability management, CDM, or security operations.
• Experience administering enterprise vulnerability scanning platforms and credentialed scanning across large hybrid environments.
• Working knowledge of the DHS CDM program, including asset management, configuration monitoring, reporting, and CDM dashboard concepts.
• Familiarity with FISMA, FIPS 199, NIST SP 800-53 Rev. 5, RMF, and continuous monitoring supporting Ongoing Authorization
• Experience managing vulnerabilities in accordance with the CISA Known Exploited Vulnerabilities (KEV) Catalog and applicable CISA Binding Operational Directives.
• Strong analytical, communication, and collaboration skills with the ability to work effectively across technical and customer organizations.
• Ability to satisfy federal background investigation requirements and complete required onboarding before receiving system access.
• U.S. work authorization

Responsibilities

• Implement, operate, and maintain CDM capabilities to strengthen enterprise cybersecurity posture.
• Maintain CDM scanning infrastructure across on-premises, cloud, and hybrid environments.
• Partner with stakeholders to expand CDM as environments modernize and adopt cloud.
• Support transition to Ongoing Authorization with continuous monitoring and visibility.
• Deliver asset visibility and improve detection of vulnerabilities, misconfigurations, and unmanaged assets.
• Manage enterprise vulnerability scanning infrastructure including credentialed scanning.
• Analyze scan results, prioritize risk, and provide remediation recommendations.
• Monitor KEV Catalog and guidance to support timely remediation and directives.
• Support asset inventory, configuration monitoring, and compliance reporting; collaborate with teams.
• Contribute data for executive cybersecurity reporting, CIO dashboards and vulnerability reports.
• Produce CDM deliverables like scan results every three days and mitigation documentation.

Skills

CDM capabilities

Vulnerability management

Scanning infrastructure

Stakeholder collaboration

Education

Bachelor's degree in Computer Science / Information Systems / Cybersecurity

Job description

Responsibilities

• Implement, operate, and maintain Continuous Diagnostics and Mitigation (CDM) capabilities that strengthen enterprise cybersecurity posture
• Maintain the CDM scanning infrastructure supporting client systems across on‑premises, cloud, and hybrid environments
• Partner with technical stakeholders to expand and mature CDM capabilities as the environment evolves through modernization and cloud adoption
• Support the transition to Ongoing Authorization by providing continuous monitoring and security visibility
• Deliver continuous asset visibility and improve detection of vulnerabilities, configuration issues, unmanaged assets, and unauthorized software or hardware
• Manage enterprise vulnerability scanning infrastructure, including credentialed scanning across systems, devices, and applications
• Analyze vulnerability scan results, prioritize risk, and provide actionable remediation recommendations
• Monitor the CISA Known Exploited Vulnerabilities (KEV) Catalog and other authoritative guidance to support timely remediation and compliance with applicable Binding Operational Directives
• Support enterprise asset inventory, configuration monitoring, and compliance reporting activitiesCollaborate with the client and department stakeholders, system owners, administrators, and technical teams to improve security operations, optimize tools, and support incident response activities
• Contribute data and analysis supporting executive cybersecurity reporting, including weekly CIO dashboards and ad hoc vulnerability reports
• Produce and maintain required CDM deliverables, including CDM Scan Results on the DHS-defined periodicity of no less than every three days, CDM Mitigation Procedures documenting mitigation steps and end-user mitigation activities when requested, and compliance reporting

Core Competencies

Demonstrates expertise in Continuous Diagnostics and Mitigation (CDM) capabilities, enterprise vulnerability management, and compliance with federal cybersecurity standards. Proficient in analyzing vulnerabilities, managing scanning infrastructure, and collaborating with stakeholders to enhance security operations.

Requirements

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or a related field, or equivalent professional experience
• Five or more years of experience supporting enterprise vulnerability management, Continuous Diagnostics and Mitigation (CDM), or security operations
• Experience administering enterprise vulnerability scanning platforms and supporting credentialed scanning across large hybrid environments
• Working knowledge of the DHS Continuous Diagnostics and Mitigation (CDM) program, including asset management, configuration monitoring, reporting, and CDM dashboard concepts
• Familiarity with FISMA, FIPS 199, NIST SP 800-53 Rev. 5, Risk Management Framework (RMF), and continuous monitoring supporting Ongoing Authorization
• Experience managing vulnerabilities in accordance with the CISA Known Exploited Vulnerabilities (KEV) Catalog and applicable CISA Binding Operational Directives
• Strong analytical, communication, and collaboration skills with the ability to work effectively across technical and customer organizations
• Ability to satisfy federal background investigation requirements and complete required onboarding before receiving system access
• U.S. work authorization