Senior Federal Vulnerability Management Lead

NTT DATA, Inc.; Richmond (VA); Hybrid; USD 103,000 - 210,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

401k with company match

Paid time off

Job summary

NTT DATA, Inc. is seeking a Cybersecurity Lead‑Vulnerability management in Arlington, Virginia.

The Senior Lead provides hands-on expertise to secure federal information systems under RMF, FISMA, and HIPAA, coordinating across IT teams to maintain security compliance and enable ATO maintenance. The role oversees vulnerability management operations, leads incident response planning, and implements enterprise security controls across on-premise and cloud environments.

Qualifications

• Masters degree required; substitution rules allow 1.5 years extra experience for 1 year of degree.
• Minimum 10 years’ experience performing cybersecurity and team lead tasks.
• Ability to obtain and maintain a public trust clearance.
• Hybrid role requiring 4 days onsite in Arlington, VA.

Responsibilities

• Lead full lifecycle NIST RMF activities from categorization to ATO sustainment.
• Ensure compliance with FISMA, HIPAA, and agency-specific security policies.
• Coordinate with assessment and authorization stakeholders for audits and documentation.
• Review scan results, validate findings, and coordinate remediation with system owners.
• Develop and maintain processes for continuous monitoring, risk scoring, and leadership reporting.
• Lead coordination with internal security teams and government stakeholders.
• Conduct post-incident reviews and improve incident response plans.

Skills

NIST RMF

Vulnerability scanning

SIEM platforms

Security automation

Incident response

Threat intelligence

Audits & reporting

Team leadership

Education

Master's degree

Tools

Nessus

Agency scanners

Job description

NTT DATA, Inc. is seeking a Cybersecurity Lead‑Vulnerability management in Arlington, Virginia.

The Senior Lead provides hands-on expertise to secure federal information systems under RMF, FISMA, and HIPAA, coordinating across IT teams to maintain security compliance and enable ATO maintenance. The role oversees vulnerability management operations, leads incident response planning, and implements enterprise security controls across on-premise and cloud environments.