Senior Vulnerability Management Lead

NTT America, Inc.; Arlington (VA); Hybrid; USD 103,000 - 210,000; Full time

Benefits offered by this job

Medical, dental, and vision insurance

401(k) with company match

Paid time off

Employee assistance program

Job summary

NTT DATA seeks a Senior Vulnerability Management Lead to drive federal RMF compliance and hands-on security operations in Arlington, VA. You will oversee vulnerability management, incident response planning, and continuous monitoring across on-premises and cloud environments, coordinating with cross-functional IT teams and government stakeholders to ensure ATO readiness.

The role emphasizes threat mitigation, audits, and enterprise security controls, with mentorship of cybersecurity engineers

Qualifications

• Master's Degree required; one and a half years of additional experience can substitute for one year of a typical degree program.
• Minimum 10 years’ experience in cybersecurity and team lead tasks/responsibilities.
• Ability to obtain and maintain a public trust clearance.
• Hybrid role requiring 4 days onsite in Arlington, VA.

Responsibilities

• Lead full lifecycle NIST RMF activities, including categorization, control implementation, security assessment, POA&Ms, and ATO sustainment.
• Ensure compliance with federal security standards such as FISMA, HIPAA, and agency-specific policies.
• Coordinate with assessment and authorization stakeholders to maintain documentation, respond to findings, and support audits.
• Review scan results, validate findings, determine criticality, and coordinate remediation with system owners and operations teams.
• Develop and maintain processes for continuous monitoring, risk scoring, and reporting to leadership.
• Integrate threat intelligence platforms to identify emerging risks and drive proactive mitigation strategies.
• Support security audits, penetration tests, and secure configuration enforcement.
• Guide the implementation and maintenance of security controls across infrastructure, applications, and cloud environments.
• Provide expertise in secure architecture, configuration management, identity and access management, and audit log review.

Skills

Vulnerability management

NIST RMF

Team leadership

Public trust clearance

Hybrid work

Education

Master's Degree

Tools

Nessus

SIEM platforms

agency-approved scanners

Security automation

Job description

Req ID: 390742

NTT DATA strives to hire exceptional, innovative and passionate individuals who want to grow with us.

We are currently seeking a Senior Vulnerability Management Lead to join our team in Arlington, Virginia (US-VA), United States (US).

Job Summary:

The Senior Vulnerability Management Lead provides technical leadership and hands‑on expertise to secure federal information systems in accordance with NIST Risk Management Framework (RMF), FISMA, HIPAA, and agency‑specific requirements. This role oversees vulnerability management operations, leads incident response planning and execution, and ensures continuous security compliance to support Authorization to Operate (ATO) maintenance. Working closely with cross‑functional IT teams, the Team Lead strengthens cybersecurity posture through proactive threat mitigation, audit readiness, and the implementation of enterprise security controls.

Responsibilities

• Lead full lifecycle NIST RMF activities, including categorization, control implementation, security assessment, POA&M management, and ATO sustainment.
• Ensure compliance with federal security standards such as FISMA, HIPAA, and agency‑specific security policies.
• Coordinate with assessment and authorization stakeholders to maintain documentation, respond to findings, and support audits and system reviews.
• Review scan results, validate findings, determine criticality, and coordinate remediation with system owners and operations teams.
• Develop and maintain processes for continuous monitoring, risk scoring, and reporting to leadership.
• Integrate threat intelligence platforms to identify emerging risks and drive proactive mitigation strategies.
• Support security audits, penetration tests, and secure configuration enforcement.
• Lead coordination with internal security teams, IT operations, legal/compliance, and government stakeholders to ensure proper handling, documentation, and reporting.
• Conduct post‑incident reviews and improve incident response plans and playbooks.
• Guide the implementation and maintenance of security controls across infrastructure, applications, and cloud environments.
• Provide expertise in secure architecture, configuration management, identity and access management, and audit log review.
• Analyze system changes for security impacts and support change control processes.
• Drive continuous improvement, standardization, and security optimization across the program.
• Supervise cybersecurity engineers and specialists, providing mentorship, task direction, and performance oversight.
• Facilitate collaboration with network, server, cloud, and application teams to ensure timely vulnerability remediation and control implementation.
• Support program‑level coordination activities, including reporting, stakeholder briefings, and cross‑team integration efforts.

Qualifications

• Masters Degree, One-and-one- half (1.5) years of additional experience can substitute for one (1) year of a typical degree program.
• Minimum 10 years’ experience performing the cybersecurity and team lead tasks/responsibilities listed above
• Ability to obtain and maintain a public trust clearance
• Hybrid role requiring 4 days onsite in Arlington, VA.

Preferred Skills

• Extensive experience with NIST RMF in federal environments.
• Hands‑on knowledge of vulnerability scanning tools (e.g., Nessus), SIEM platforms, and security automation.
• Oversee enterprise vulnerability scanning operations using tools such as Nessus and agency‑approved scanners.
• Use enterprise security tools (e.g., SIEM platforms, endpoint protection, IDS/IPS) to monitor events and support investigations.
• Experience leading cybersecurity teams and coordinating with multidisciplinary IT groups.
• Strong understanding of federal cybersecurity mandates (FISMA, HIPAA, and agency policies).
• Experience with incident response planning, execution, and reporting.
• Ability to interpret threat intelligence and translate it into actionable risk mitigation.
• Ability to manage multiple requests and deadlines in a fast‑paced environment.
• CISSP, CISM, CEH, Security+, or equivalent certifications.
• Experience supporting federal law enforcement, DoD, DHS, or DOJ programs.
• Familiarity with compliance auditing tools and enterprise monitoring solutions.

NTT DATA provides a reasonable range of compensation for specific roles. The starting pay range for this remote role is $103,275 - $210,000. This range reflects the minimum and maximum target compensation for the position across all US locations. Actual compensation will depend on a number of factors, including the candidate’s actual work location, relevant experience, technical skills, and other qualifications. This position may also be eligible for incentive compensation based on individual and/or company performance. If the position offered in temporary, the position will not be eligible for incentive compensation. This position is eligible for company benefits including medical, dental, and vision insurance with an employer contribution, flexible spending or health savings account, life and AD&D insurance, short and long term disability coverage, paid time off, employee assistance, participation in a 401k program with company match, and additional voluntary or legally-required benefits.

About NTT DATA

NTT DATA is a $30 billion business and technology services leader, serving 75% of the Fortune Global 100. We are committed to accelerating client success and positively impacting society through responsible innovation. We are one of the world's leading AI and digital infrastructure providers, with unmatched capabilities in enterprise-scale AI, cloud, security, connectivity, data centers and application services. our consulting and Industry solutions help organizations and society move confidently and sustainably into the digital future. As a Global Top Employer, we have experts in more than 50 countries. We also offer clients access to a robust ecosystem of innovation centers as well as established and start-up partners. NTT DATA is a part of NTT Group, which invests over $3 billion each year in R&D.

NTT DATA endeavors to make https://us.nttdata.com accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact us at https://us.nttdata.com/en/contact-us. This contact information is for accommodation requests only and cannot be used to inquire about the status of applications. NTT DATA is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status. For our EEO Policy Statement, please click here (http://us.nttdata.com/en/compliance#eeos). If you'd like more information on your EEO rights under the law, please click here (http://us.nttdata.com/en/compliance#know-your-rights). For Pay Transparency information, please click here (http://us.nttdata.com/en/compliance#ppnp).