Senior Technical Support Specialist

MaineGuide; Augusta (ME); Hybrid; USD 75,000 - 105,000; Full time

Benefits offered by this job

Partial telework after 3 months

Job summary

Office of Information Technology in Augusta is seeking a Vulnerability Management Team Lead to provide leadership, direction, and program oversight for enterprise vulnerability management and application testing across State systems, cloud services, and networks.

You will guide vulnerability identification, remediation coordination, reporting, and continuous improvement while collaborating with SOC, ISO, vendors, and stakeholders to align with statewide cybersecurity priorities.

Qualifications

• Lead vulnerability management operations and oversee the enterprise VM program.
• Coordinate application security testing and remediation planning.
• Develop dashboards and metrics to support risk-informed decisions.

Responsibilities

• Lead Vulnerability Management Operations and prioritize work.
• Oversee Enterprise Vulnerability Management Program across state systems.
• Lead Application Security Testing and remediation recommendations.
• Configure and maintain security testing platforms for reliable scanning.

Skills

Vulnerability management

Application testing

Security platforms

Dashboards & metrics

Cross-team coordination

Tools

Security tooling

Job description

If you are a current State of Maine employee, please submit your application through the internal application process using the Find Jobs report in PRISM. Seasonal employees who do not have PRISM access should apply through the State’s career page and indicate on the application that they have previously worked for the State.

Office of Information Technology

Opening Date:October 20, 2026

Closing Date:November 3, 2026

Grade / Admin Unit: 29 / Professional/Technical

Job Class Code: 0871Salary: $74,845.68 - $105,056.22*/Annually (*Includes a 15% recruitment and retention stipend) Position Number: 004250736

Location: Augusta

Telework: Partial telework options are available after 3 months, with management approval

Currently, this position is not eligible for visa sponsorship or STEM OPT extensions.

DESCRIPTION

As the Vulnerability Management Team Lead, you’ll provide operational leadership, technical direction, and program oversight for the Information Security Office’s enterprise Vulnerability Management and Application Testing program. This role offers the opportunity to guide vulnerability identification, validation, prioritization, remediation coordination, application security testing, reporting, metrics development, and continuous improvement across State systems, applications, cloud services, network environments, and enterprise technology assets.

You’ll work closely with SOC leadership, ISO teams, skilled contractor personnel, application teams, infrastructure teams, agency stakeholders, vendors, service providers, and leadership to improve enterprise visibility into cybersecurity risk. The position supports vulnerability scanning, application testing, limited penetration testing, remediation tracking, secure software development practices, dashboarding, metrics, reporting, and program documentation.

This position also plays a key role in coordinating assigned program resources, advising leadership, supporting risk-informed decision-making, guiding remediation priorities, and ensuring vulnerability management and application testing activities align with ISO priorities and statewide cybersecurity needs.

We are seeking a highly talented individual who will represent our C.A.R.E. values in all that they do.

At MaineIT we:

• PracticeCustomer-focus, ensuring that our customers areheard,and their needs are met
• Hold ourselves to a high level ofAccountabilityby being transparent with our stakeholders
• Maintain an effective level ofResponsivenessby providing timely updates in a proactive manner
• Strive to provideEmpathy-driven, people-focused services by applying emotional intelligence skills and behaviors

WHAT YOU'LL DO

No two days look quite the same in MaineIT’s Information Security Office. In general, you can expect to:

• Lead Vulnerability Management Operations: Assign and prioritize work, coordinate daily operational coverage, conduct follow-up, guide skilled contractor personnel, support program readiness, and help ensure vulnerability management and application testing work is completed accurately, consistently, and timely.
• Oversee the Enterprise Vulnerability Management Program: Lead vulnerability identification, scanning coverage, validation, prioritization, remediation tracking, exception review preparation, and reporting across State systems, applications, cloud services, network environments, and enterprise technology assets.
• Lead Application Security Testing: Coordinate testing intake, testing activities, analysis, validation, documentation, and communication of application vulnerabilities, including support for secure software development practices and remediation recommendations.
• Administer Security Testing Platforms: Configure, maintain, tune, and improve vulnerability management and application testing platforms to support reliable scanning, accurate results, effective reporting, data aggregation, workflow management, and operational visibility.
• Develop Reporting and Metrics: Build and maintain dashboards, KPIs, KRIs, reports, templates, executive summaries, operational briefings, and trend analysis materials that support risk-informed decision-making and program accountability.
• Coordinate Remediation Activities: Work with application teams, infrastructure teams, agency stakeholders, vendors, and service providers to communicate findings, clarify risk, track remediation progress, resolve capability gaps, and elevate unresolved or high-risk issues.
• Support Security Analysis and Testing: Conduct and coordinate limited penetration testing, vulnerability validation, root-cause review, and technical analysis to identify infrastructure, application, configuration, and process weaknesses.
• Provide Technical Guidance: Advise the Security Operations Center Manager, ISO leadership, technical teams, vendors, service providers, and stakeholders regarding vulnerability management, application testing, remediation priorities, tool use, operational risks, and program improvements.
• Support Security Initiatives and Projects: Participate in stakeholder meetings; analyze technical and operational requirements; contribute to secure software development improvements; develop metrics; produce reports; and deliver briefings or presentations to support informed decision-making.
• Maintain Program Documentation: Develop, document, and maintain standard operating procedures, testing procedures, remediation workflows, vulnerability management playbooks, knowledge articles, workflow diagrams, and supporting operational documentation.
• Support Training and Knowledge Sharing: Provide training, mentoring, and instructional materials on vulnerability review, application testing, security tooling, remediation processes, and response procedures to improve readiness, consistency, and response effectiveness.

WHY THIS ROLE STANDS OUT

As a cybersecurity professional, you have a lot of options when it