Vulnerability Assessment Team Lead

Gritter Francona; Ashburn (GA); On-site; USD 100,000 - 130,000; Full time

Benefits offered by this job

Health Care Plan (Medical, Dental & Vision)

Retirement Plan (401k, IRA)

Life Insurance (Basic, Voluntary & AD&D)

Paid Time Off (Vacation, Sick & Public Holidays)

Short Term & Long Term Disability

Training & Development

Job summary

A cybersecurity firm is seeking a Vulnerability Assessment Team Lead to direct their comprehensive vulnerability management program for the Department of Homeland Security. This role includes managing a team of analysts, overseeing vulnerability assessments, and briefing leadership on vulnerabilities and remediation strategies. Candidates should have at least 5 years of experience in vulnerability assessments and certifications such as CISM and CISSP. The position offers a benefits package including healthcare and retirement plans.

Qualifications

• Minimum of 5 years experience performing vulnerability assessments for an enterprise network.
• Experience analyzing vulnerabilities and providing assessments and remediation instructions.
• Familiarity with FISMA compliance.

Responsibilities

• Lead the VA team in managing CBP's Enterprise Vulnerability Management compliance.
• Oversee vulnerability assessments and penetration tests.
• Brief CBP leadership on current vulnerabilities.
• Manage repository of VA application issues.
• Prepare security testing Rules of Engagement for government approval.
• Support internal and external audits.

Skills

Vulnerability assessments

Application Security implementation

Firewall Management

Advanced Threat Protection

Access Control

Risk Management Framework

Education

Certified Information Security Manager (CISM)

Certified Information Systems Security Professional (CISSP)

Job description

Overview

Gritter Francona is looking for a Vulnerability Assessment Team Lead to support a potential project with the Department of Homeland Security. The Lead will manage a comprehensive vulnerability management program for The Department of U.S. Customs and Border Protection (CBP). The Lead will direct a team of analysts responsible for conducting enterprise-wide vulnerability scanning, penetration testing, and specialized assessments (web, database, wireless). This is a critical leadership role that involves managing scan policies, analyzing results, and briefing CBP leadership on the most impactful vulnerabilities and remediation strategies.

Responsibilities

• Lead the VA team in managing CBP's Enterprise Information System Vulnerability Management (ISVM) compliance validation.
• Oversee regularly scheduled and ad hoc vulnerability assessments, penetration tests, and specialized assessments for web applications, databases, and 802.11 Wireless networks.
• Brief CBP leadership on current and future vulnerabilities, security policies, and the results of penetration testing efforts.
• Manage and maintain a repository of VA application issues and report them to the Government VAT Team Lead.
• Direct the preparation of security testing Rules of Engagement (ROE) for government approval prior to conducting penetration testing.
• Provide leadership and support for internal and external audits (e.g., OIG, NCATS) and Bug Bounty assessments.

Qualifications

• A minimum of 5 years of experience performing vulnerability assessments for an enterprise network.
• Experience analyzing vulnerabilities and providing assessments and remediation instructions.
• Knowledge of Application Security implementation, Firewall Management, and Advanced Threat Protection.
• Familiarity with Access Control, Authorization, Intrusion Prevention and Intrusion Detection.
• Familiarity with FISMA compliance and the Risk Management Framework.
• Certified Information Security Manager (CISM)
• Certified Information Systems Security Professional (CISSP)

Benefits

• Health Care Plan (Medical, Dental & Vision)
• Retirement Plan (401k, IRA)
• Life Insurance (Basic, Voluntary & AD&D)
• Paid Time Off (Vacation, Sick & Public Holidays)
• Short Term & Long Term Disability
• Training & Development