Vulnerability Management & Cybersecurity Lead

General Dynamics IT; EE. UU.; A distancia; USD 130.000 - 170.000; Jornada completa

Descripción de la vacante

General Dynamics IT seeks a Vulnerability Assessment Analyst SME to support the Department of Veterans Affairs in Austin, TX, with remote options. You will direct enterprise vulnerability management, RMF/ATO, and continuous monitoring across large-scale systems, aligning with federal standards and VA requirements.

You will lead cross-functional teams, drive KEV remediation, and produce executive dashboards and posture reports to strengthen VA's security posture across hybrid environments.

Formación

• Bachelor's degree and 12+ years of experience in enterprise cybersecurity, vulnerability management, RMF/ATO operations, or federal IT program leadership.
• Experience overseeing large-scale federal cybersecurity programs across multiple technical domains.
• Deep understanding of federal cybersecurity frameworks and compliance requirements (NIST SP 800-53, 800-30, 800-63, 800-207).
• FISMA, RMF, CISA BOD requirements; Zero Trust, TIC 3.0, and OMB mandates.

Responsabilidades

• Lead enterprise vulnerability management, RMF/ATO execution, POA&M oversight, KEV remediation, and continuous monitoring across 130+ system boundaries and millions of endpoints.
• Ensure compliance with FISMA, NIST, CISA directives, OMB memoranda, VA Handbook 6500, and Zero Trust modernization goals.
• Oversee RMF artifacts, system documentation, inventories, baselines, privacy artifacts, and ATO packages.
• Direct cybersecurity integration across ICAM, PKI, WebOps, Middleware, Virtualization, Printer Security, Database, and OC/CMOP teams.
• Lead KEV/aged vulnerability analysis, stakeholder notifications, trend reporting, and remediation tracking.
• Produce dashboards, scorecards, posture reports, continuous monitoring artifacts, and executive-level metrics.
• Oversee Common Controls governance, evidence collection, control reviews, and compliance validation.
• Lead coordinated remediation, escalation workflows, RCA processes, and unified cybersecurity situational awareness.

Conocimientos

Communication

Enterprise Systems

Leadership

Risk Mitigation

Educación

Bachelor's degree

Descripción del empleo

Type of Requisition: Regular

Clearance Level Must Currently Possess: None

Clearance Level Must Be Able to Obtain: None

Public Trust/Other Required: MBI (T2)

Job Family: Cyber and IT Risk Management

Job Qualifications: Skills: Communication, Enterprise Systems, Leadership, Risk Mitigation Certifications: None Experience: 10 + years of related experience US Citizenship Required: Yes

Job Description:

Seize your opportunity to make a personal impact as a VULNERABILITY ASSESSMENT ANALYST SME supporting the Department of Veterans Affairs (VA) GDIT is your place to make meaningful contributions to challenging projects, build your skills, and grow a rewarding career.

At GDIT, people are our differentiator. As a VULNERABILITY ASSESSMENT ANALYST SME supporting the Department of Veterans Affairs (VA) in Austin Texas, you will help ensure today is safe and tomorrow is smarter.

GDIT is partnering with the Department of Veterans Affairs to modernize and secure enterprise systems supporting millions of Veterans. As the Vulnerability Management & Cybersecurity Lead, you will serve as the senior technical authority directing VA's enterprise vulnerability management, RMF/ATO compliance, KEV remediation, and Common Control governance across Infrastructure Operations Application Services.

You will unify cybersecurity efforts across PKI, Web/Middleware, Virtualization, Printer Security, Database, and Operations Control; ensure compliance with federal mandates and VA Handbook 6500; and strengthen VA's security posture across its complex hybrid environment. Your leadership drives continuous monitoring excellence, risk mitigation, audit readiness, and secure operation of mission‑critical systems supporting Veteran health, benefits, and enterprise services.

HOW A VULNERABILITY ASSESSMENT ANALYST SME WILL MAKE AN IMPACT

• Lead enterprise vulnerability management, RMF/ATO execution, POA&M oversight, KEV remediation, and continuous monitoring across 130+ system boundaries and millions of endpoints.
• Ensure compliance with FISMA, NIST, CISA directives, OMB memoranda, VA Handbook 6500, and Zero Trust modernization goals.
• Oversee RMF artifacts, system documentation, inventories, baselines, privacy artifacts, and ATO packages.
• Direct cybersecurity integration across ICAM, PKI, WebOps, Middleware, Virtualization, Printer Security, Database, and OC/CMOP teams.
• Lead KEV/aged vulnerability analysis, stakeholder notifications, trend reporting, and remediation tracking.
• Produce dashboards, scorecards, posture reports, continuous monitoring artifacts, and executive‑level metrics.
• Oversee Common Controls governance, evidence collection, control reviews, and compliance validation.
• Lead coordinated remediation, escalation workflows, RCA processes, and unified cybersecurity situational awareness.
• Drive modernization across vulnerability management, RMF automation, Zero Trust alignment, cloud security improvements, and enterprise hardening.

What You'll Need to Succeed

• Bachelor's degree and 12+ years of experience in enterprise cybersecurity, vulnerability management, RMF/ATO operations, or federal IT program leadership.
• Experience overseeing large-scale federal cybersecurity programs across multiple technical domains.
• Deep understanding of federal cybersecurity frameworks
• NIST SP 800‑53, 800‑30, 800‑63, 800‑207
• FISMA, RMF, CISA BOD requirements
• Zero Trust, TIC 3.0, OMB cybersecurity mandates
• Proven ability to lead cross-functional engineering teams in multi-vendor environments.
• Experience with enterprise vulnerability management programs (KEV remediation, continuous monitoring, posture evaluation).
• Demonstrated skills in program management, stakeholder communication, audit readiness, and performance reporting.
• Strong strategic, analytical, organizational, and executive‑level communication skills.
• Ability to support escalations, major incident coordination, and enterprise governance activities.

Desired Qualifications

• PMP, PgMP, SAFe, CISSP, CISM, CAP, or ITIL v4 certification
• Experience supporting VA or other large federal cybersecurity programs
• Experience leading RMF/ATO programs or Common Control governance
• Technical depth in PKI, ICAM, cloud security, vulnerability tools, database security, middleware/web security, virtualization security, or enterprise monitoring
• Experience managing performance-based contracts with strict KPIs/AQLs

Security Clearance

• Must be able to obtain a Public Trust clearance

Work Location

Austin, TX or Remote

No visa sponsorship available

GDIT IS YOUR PLACE

• Mission‑focused culture supporting those who serve
• AI-powered career advancement tools and robust internal mobility
• Competitive pay, benefits, 401(k) match, and wellness programs
• A collaborative, innovative, military-friendly workplace
• Opportunities to modernize VA's cybersecurity posture, strengthen vulnerability management, and lead enterprise transformation across critical national systems