Security Engineer – Vulnerability Management

Waypoint Human Capital; Chantilly (VA); On-site; USD 110,000 - 160,000; Full time

Job summary

Waypoint Human Capital seeks a Security Engineer focused on Vulnerability Management in Chantilly, VA. The role requires an active TS/SCI clearance with polygraph and hands-on expertise in vulnerability assessment, scanning, patch management, and risk-based remediation within complex IT environments.

The ideal candidate will communicate findings clearly to leadership, collaborate across IT and security teams, and drive continuous improvement of vulnerability management processes in a

Qualifications

• Active TS/SCI clearance with polygraph required.
• IAM Level II certification or higher.
• Bachelor's degree in a STEM field (e.g., Computer Science, Cybersecurity, IT, Engineering).
• Minimum of five years of experience in vulnerability management, cybersecurity, or security engineering.

Responsibilities

• Conduct vulnerability assessments and security scans across enterprise systems, networks, applications, and infrastructure to identify security weaknesses.
• Utilize vulnerability scanning tools (e.g., Nessus) to detect and track vulnerabilities in complex environments.
• Support patch management systems and remediation workflows to close identified gaps.
• Apply security engineering principles to prioritize and mitigate vulnerabilities based on risk and mission impact.
• Collaborate with system admins and security teams to coordinate remediation activities and track progress.
• Document findings and remediation status using platforms like ServiceNow and produce leadership briefings.

Job description

Security Engineer – Vulnerability Management

• Chantilly, VA

Position Title: Security Engineer – Vulnerability Management

Position Type: Full-Time, On-Site

Location: Chantilly, VA

Clearance: Active Top Secret/SCI with Polygraph

Waypoint’s client is seeking an experienced Security Engineer specializing in Vulnerability Management to support cybersecurity operations and security engineering initiatives for mission-critical systems within the Intelligence Community. This position will play a key role in identifying, assessing, prioritizing, and mitigating security vulnerabilities across enterprise systems, networks, and applications to maintain a strong organizational security posture.

This ideal candidate will possess a strong technical foundation in vulnerability management, cybersecurity engineering, vulnerability scanning technologies, and remediation processes. This individual must be capable of working independently, collaborating with multidisciplinary teams, and effectively communicating technical findings, security risks, and remediation recommendations to leadership.

Responsibilities

• Conduct vulnerability assessments and security scans across enterprise systems, networks, applications, and infrastructure to identify potential security weaknesses.
• Utilize vulnerability scanning tools, such as Nessus, to detect, analyze, and track security vulnerabilities across complex IT environments.
• Support the implementation and management of patch management systems and vulnerability remediation workflows.
• Apply security engineering principles to assess, prioritize, and mitigate identified vulnerabilities based on severity, risk, and potential mission impact.
• Collaborate with system administrators, network engineers, cybersecurity professionals, and other technical teams to coordinate vulnerability remediation activities.
• Leverage vulnerability management and workflow tracking platforms, such as ServiceNow, to document findings, monitor remediation progress, and support reporting requirements.
• Analyze vulnerability scan results, identify recurring security issues, and recommend corrective actions to reduce organizational risk.
• Support the development and implementation of vulnerability management processes, security controls, and remediation strategies.
• Track vulnerability remediation efforts to ensure identified security weaknesses are appropriately addressed and documented.
• Evaluate existing security configurations and recommend improvements to strengthen enterprise cybersecurity defenses.
• Provide technical expertise and recommendations to support risk-based security decisions and continuous improvement initiatives.
• Prepare and deliver vulnerability assessment reports, remediation status updates, and technical briefings to leadership and other stakeholders as needed.
• Work independently to manage assigned responsibilities, resolve technical challenges, and support cybersecurity objectives with minimal oversight.
• Communicate effectively with cross-functional teams to ensure vulnerability management activities align with organizational security requirements and operational priorities.

Required

• Active Top Secret/SCI clearance with Polygraph.
• IAM Level II certification or higher in accordance with applicable DoD cybersecurity workforce requirements.
• Bachelor's degree or higher in a STEM discipline, such as Computer Science, Cybersecurity, Information Technology, Engineering, or a closely related technical field.
• Minimum of five (5) years of professional experience in vulnerability management, cybersecurity, security engineering, or a closely related technical discipline.
• Demonstrated hands-on experience with vulnerability scanning tools, patch management systems, and risk remediation workflows.
• Experience utilizing vulnerability scanning technologies, including Nessus or comparable tools, to identify, assess, and prioritize system vulnerabilities.
• Experience with ServiceNow or comparable platforms for vulnerability tracking, remediation coordination, and workflow management.
• Demonstrated experience applying security engineering principles to assess, prioritize, and mitigate vulnerabilities across enterprise systems and infrastructure.
• Strong understanding of vulnerability management methodologies, security risk assessment, and remediation processes.
• Ability to analyze technical security findings, determine potential risk exposure, and recommend appropriate corrective actions.
• Experience collaborating with technical teams to coordinate vulnerability remediation and strengthen overall security posture.
• Strong analytical, troubleshooting, and problem-solving skills.
• Self-motivated professional capable of working independently and managing responsibilities with minimal supervision.
• Excellent interpersonal and communication skills, with the ability to collaborate effectively in a team-oriented environment.
• Ability to communicate complex technical information clearly and provide vulnerability assessment findings, remediation recommendations, and security briefings to technical teams, stakeholders, and senior leadership as needed.