Senior Vulnerability Management Lead – Federal IT Security

August Schell; Bethesda (MD); On-site; USD 120,000 - 180,000; Full time

Job summary

National Library of Medicine (NLM) is seeking an IT Security Compliance Lead / Senior Security Analyst to safeguard the agency's IT infrastructure in Bethesda, MD. You will work with the ISSO and lead vulnerability management across on‑prem and cloud environments.

Responsibilities include defining architecture, maintaining documentation, and ensuring FISMA/FedRAMP compliance while coordinating with NIH teams and IT operations. This role requires onsite presence 3–5 days per week.

Qualifications

• Experience translating complex IT security risks into business terms.
• Proven vulnerability management lifecycle and patching processes.
• Knowledge of securing cloud platforms (AWS/GCP) and hybrid environments.
• Familiarity with federal security programs (FISMA, FedRAMP) and SA&A documentation.
• Strong collaboration with executives, vendors, and technical teams.

Responsibilities

• Lead vulnerability management lifecycle across on-prem and cloud environments.
• Coordinate remediation with IT operations and system owners.
• Define scanner/center architecture; tune scanning configurations to minimize false positives.
• Develop and maintain docs for vulnerability processes and remediation tracking.
• Support security projects requiring government policy compliance.
• Be SME for vulnerability management tools and NIH mandates.

Skills

IT security

Vulnerability management

Cloud security (AWS/GCP)

FISMA & FedRAMP

CVSS2 scoring

Policy & governance

Stakeholder communication

Vulnerability scanning tools

Windows/Linux security

Scripting (Python/PowerShell)

Education

Bachelor's degree in CS/Cybersecurity/IT

CISSP (or within 6 months)

Tools

Tenable/Nessus

Nessus Manager

Tenable.io

NIST/NIH compliance tools

Job description

National Library of Medicine (NLM) is seeking an IT Security Compliance Lead / Senior Security Analyst to safeguard the agency's IT infrastructure in Bethesda, MD. You will work with the ISSO and lead vulnerability management across on‑prem and cloud environments.

Responsibilities include defining architecture, maintaining documentation, and ensuring FISMA/FedRAMP compliance while coordinating with NIH teams and IT operations. This role requires onsite presence 3–5 days per week.