Remote Vulnerability Management Lead

Peraton; Herndon (VA); Remote; USD 140,000 - 190,000; Full time

Job summary

Peraton is seeking a Vulnerability Management Lead to oversee the organization’s vulnerability management program across enterprise infrastructure, applications, cloud environments, and systems. You will provide strategic and technical leadership in vulnerability identification, risk prioritization, remediation coordination, and continuous monitoring to reduce attack surface.

The role collaborates with security operations, infrastructure, cloud, and development teams to enforce standards and

Qualifications

• Citizen with ability to obtain/maintain Public Trust clearance.
• Bachelor's or higher with experience requirements, or equivalent.
• Certifications such as GCIH, CISSP, CISM or CRISC are preferred.
• Experience managing vulnerability programs and remediation.
• Experience with POA&Ms and security compliance.

Responsibilities

• Lead vulnerability management across enterprise infrastructure, apps, and cloud.
• Manage POA&Ms, track remediation progress, coordinate with stakeholders.
• Support ATO processes with vulnerability assessment results and evidence.
• Develop dashboards and reports on vulnerability trends and risk.
• Collaborate with ISOs, ISSOs, compliance, and engineers to align with security policies.
• Administer Tenable and Aqua Security tools to improve visibility and workflows.
• Integrate vulnerability data with CDM program and tools.
• Track KPIs like remediation timelines and risk reduction.

Skills

Vulnerability management

POA&Ms tracking

Dashboards & reporting

Risk-based prioritization

CDM integration

Education

Bachelor's degree

Master's degree

Associate's degree

High school diploma or equivalent

Tools

Tenable

Aqua Security

Job description

Peraton is seeking a Vulnerability Management Lead to oversee the organization’s vulnerability management program across enterprise infrastructure, applications, cloud environments, and systems. You will provide strategic and technical leadership in vulnerability identification, risk prioritization, remediation coordination, and continuous monitoring to reduce attack surface.

The role collaborates with security operations, infrastructure, cloud, and development teams to enforce standards and