Senior Federal Vulnerability Management Lead

True Zero Technologies; Washington (District of Columbia); On-site; USD 150,000 - 190,000; Full time

Job summary

True Zero Technologies seeks an experienced Vulnerability Management Lead to coordinate enterprise vulnerability identification, assessment, remediation tracking, and risk reduction across federal environments.

The role requires hands-on expertise with vulnerability scanning technologies, security frameworks, and federal programs, aligning engineering, compliance, and cybersecurity teams to sustain secure operations.

Qualifications

• 6+ years of progressive cybersecurity experience with hands-on vulnerability assessment and risk management in complex enterprise environments.
• Certifications: GCIH, CISSP, CISM, or CRISC.
• Experience with Tenable, Aqua Security and CDM integrations and security data across platforms.
• Strong Windows and Linux OS, network, and security infrastructure knowledge.

Responsibilities

• Lead and oversee vulnerability scanning, assessment, prioritization, and remediation tracking across federal enterprise systems, networks, apps, cloud environments, and infrastructure.
• Coordinate remediation workflows and POA&M activities to ensure timely closure of findings.
• Partner with ISOs, ISSOs, compliance, and engineering teams to validate findings and drive remediation.
• Lead Cyber Hygiene and WASP activities to improve posture and maintain compliance with federal requirements.
• Oversee vulnerability management tool implementation, configuration, and reporting integrations to ensure visibility.

Skills

Vulnerability management

Security risk assessment

Cross-functional collaboration

Policy & governance

Education

Bachelor's degree in Cybersecurity or related field

Tools

Tenable

Aqua Security

CDM

Job description

True Zero Technologies seeks an experienced Vulnerability Management Lead to coordinate enterprise vulnerability identification, assessment, remediation tracking, and risk reduction across federal environments.

The role requires hands-on expertise with vulnerability scanning technologies, security frameworks, and federal programs, aligning engineering, compliance, and cybersecurity teams to sustain secure operations.