Senior Vulnerability Analysis SME - Risk & Remediation

Leidos; Lorton (VA); On-site; USD 131,000 - 237,000; Full time

Job summary

Leidos is hiring a Vulnerability Analysis Subject Matter Expert (SME) to support the HEITS program in the Lorton, VA area. The role requires translating technical findings into actionable remediation plans for engineers, system owners, and leadership.

The SME will lead vulnerability assessment across enterprise environments, coordinate with ISSOs/owners, and ensure compliance with NIST standards while leveraging Tenable/Nessus and SIEM for risk-informed decisions.

Qualifications

• Bachelor's degree in cybersecurity, information assurance, computer science, information systems, engineering, or related discipline; or equivalent.
• Active TS/SCI security clearance required.
• Progressively responsible experience in IT, cybersecurity, or vulnerability management.
• Experience with enterprise vulnerability assessment and management technologies.
• Knowledge of NIST RMF, NIST SP 800-53, CNSSI, continuous monitoring, POA&M, and security authorization.

Responsibilities

• Perform detailed analysis of vulnerabilities across enterprise systems, networks, and applications.
• Assess risk using CVSS, KEV, EPSS, vendor advisories, and threat intelligence.
• Research emerging vulnerabilities and recommend remediation or mitigations.
• Administer vulnerability management technologies like Tenable, Nessus, or similar.
• Develop vulnerability scanning strategies and ensure coverage and accuracy.

Skills

Vulnerability assessment

Risk management

NIST RMF / 800-53

Threat intelligence

Windows & Linux

Communication to leadership

Cross-domain security

Automation tooling (UIPath)

Education

Bachelor's degree in Cybersecurity/Information Assurance/CS

Master's degree preferred

TS/SCI clearance

Tools

Tenable Security Center/Tenable.sc

Nessus

Splunk

SIEM

Job description

Leidos is hiring a Vulnerability Analysis Subject Matter Expert (SME) to support the HEITS program in the Lorton, VA area. The role requires translating technical findings into actionable remediation plans for engineers, system owners, and leadership.

The SME will lead vulnerability assessment across enterprise environments, coordinate with ISSOs/owners, and ensure compliance with NIST standards while leveraging Tenable/Nessus and SIEM for risk-informed decisions.