Remote Vulnerability Management Lead

Peraton; Reston (VA); Remote; USD 104,000 - 166,000; Full time

Job summary

Peraton is seeking a Vulnerability Management Lead to oversee and advance the organization's vulnerability management program across enterprise infrastructure, applications, cloud environments, and systems.

The role provides strategic and technical leadership in vulnerability identification, risk prioritization, remediation coordination, and continuous monitoring to reduce attack surface and cybersecurity risk.

Qualifications

• Experience managing vulnerability programs with identification, risk prioritization, remediation tracking, and reporting.
• Experience developing and tracking POA&Ms to support remediation and compliance.
• Knowledge of ATO processes, CDM, and vulnerability-related security controls.

Responsibilities

• Lead vulnerability management activities across enterprise infrastructure, applications, and cloud environments.
• Manage and maintain POA&Ms, track remediation progress, and coordinate with stakeholders for timely closure.
• Support Authorization to Operate (ATO) with results, evidence, risk assessments and required docs.
• Develop dashboards and reports to communicate trends, remediation status, and risk to leaders.
• Collaborate with ISOs, ISSOs, compliance and engineering to align with policies and regs.
• Administer and optimize vulnerability tools (Tenable, Aqua Security) to improve visibility and workflows.
• Support integration of vulnerability data with CDM program for enterprise visibility.
• Establish KPIs to drive accountability and continuous program improvement.

Skills

Vulnerability management

POA&M tracking

Dashboards & reporting

Risk-based prioritization

Cross-team collaboration

Cloud security

Education

Bachelor's Degree

Master's Degree

Tools

Tenable

Aqua Security

Job description

Peraton is seeking a Vulnerability Management Lead to oversee and advance the organization's vulnerability management program across enterprise infrastructure, applications, cloud environments, and systems.

The role provides strategic and technical leadership in vulnerability identification, risk prioritization, remediation coordination, and continuous monitoring to reduce attack surface and cybersecurity risk.