Vulnerability Management Engineer

Jobtailor; Washington (District of Columbia); On-site; USD 110,000 - 150,000; Full time

Job summary

FEMA Office of the Chief Information Security Officer in Washington, D.C. seeks a skilled vulnerability management professional to lead identification, remediation coordination, and closure validation across FEMA systems.

You will administer scanning tools (Qualys, Tenable, etc.), develop RWPs, dashboards, and reports for leadership, and support audits while ensuring compliance with DISA STIGs and security frameworks.

Qualifications

• U.S. Citizenship required.
• FEMA EOD suitability or current DHS or FEMA EOD preferred
• BS/BA plus 6 years of applicable experience in vulnerability management and cybersecurity
• Demonstrated expertise with Qualys
• Experience with vulnerability scanning tools such as dbProtect, WebInspect, or Tenable
• Experience with automated security authorization tools
• Knowledge of vulnerability assessment methodologies and risk analysis
• Strong analytical skills for vulnerability prioritization and trend analysis
• Active Secret security clearance desired
• Previous DHS or DoD experience desired
• Experience managing and administering automated scanning tools desired
• Knowledge of DISA STIGs and security compliance frameworks desired
• Experience with dashboard and reporting tools such as Tableau, Power BI, or Splunk desired
• Experience supporting audit activities desired

Responsibilities

• Lead vulnerability identification, prioritization, remediation coordination, and closure validation
• Administer scanning processes across FEMA systems
• Analyze vulnerability findings for risk and accuracy
• Monitor FEMA systems Remediation Work Plans (RWPs)
• Coordinate remediation efforts across enterprise systems
• Provide daily technical remediation support services
• Produce dashboards and surge reporting for critical vulnerabilities
• Provide vulnerability reduction reports and trend analysis reports
• Analyze vulnerability reports and remediation efforts and report to leadership as required
• Conduct monthly POA&M remediation test events
• Develop test reports within 5 days after testing
• Validate vulnerability closures
• Provide monthly compliance remediation briefs
• Utilize automated security authorization tools to manage remediation efforts and POA&M
• Support internal and external audit events
• Track and suggest technologies, processes, and practices to protect networks, devices, programs, and data
• Research and maintain proficiency in tools, techniques, countermeasures, and trends in computer and network vulnerabilities, data hiding, network and device security, and encryption

Skills

Vulnerability Management

Analytical Skills

Risk Analysis

Technical Support

Education

Bachelor's degree

Tools

Qualys

dbProtect

WebInspect

Tenable

Tableau

Power BI

Splunk

Automated Scanning Tools

Security Authorization Tools

DISA STIGs

Job description

Support the FEMA Office of the Chief Information Security Officer in Washington, D.C.
Lead vulnerability identification, prioritization, remediation coordination, and closure validation
Administer scanning processes across FEMA systems
Analyze vulnerability findings for risk and accuracy
Monitor FEMA systems Remediation Work Plans (RWPs)
Coordinate remediation efforts across enterprise systems
Provide daily technical remediation support services
Produce dashboards and surge reporting for critical vulnerabilities
Provide vulnerability reduction reports and trend analysis reports
Analyze vulnerability reports and remediation efforts and report to leadership as required
Conduct monthly POA&M remediation test events
Develop test reports within 5 days after testing
Validate vulnerability closures
Provide monthly compliance remediation briefs
Utilize automated security authorization tools to manage remediation efforts and POA&M
Support internal and external audit events
Track and suggest technologies, processes, and practices to protect networks, devices, programs, and data
Research and maintain proficiency in tools, techniques, countermeasures, and trends in computer and network vulnerabilities, data hiding, network and device security, and encryption

Requirements

• U.S. Citizenship required
• FEMA EOD suitability or current DHS or FEMA EOD preferred
• BS/BA plus 6 years of applicable experience in vulnerability management and cybersecurity
• Demonstrated expertise with Qualys
• Experience with vulnerability scanning tools such as dbProtect, WebInspect, or Tenable
• Experience with automated security authorization tools
• Knowledge of vulnerability assessment methodologies and risk analysis
• Strong analytical skills for vulnerability prioritization and trend analysis
• Active Secret security clearance desired
• Previous DHS or DoD experience desired
• Experience managing and administering automated scanning tools desired
• Knowledge of DISA STIGs and security compliance frameworks desired
• Experience with dashboard and reporting tools such as Tableau, Power BI, or Splunk desired
• Experience supporting audit activities desired

Core Competencies

Demonstrates expertise in vulnerability management and cybersecurity, with a strong focus on vulnerability identification, remediation coordination, and compliance reporting. Proficient in utilizing automated security tools and conducting risk analysis to enhance network and data security.

Highest-signal resume keywords

• Vulnerability Management
• Qualys Expertise
• Vulnerability Scanning Tools
• Automated Security Authorization Tools
• Risk Analysis

ATS Optimization Keywords

Hard Skills

• Vulnerability Identification
• Remediation Coordination
• Risk Analysis
• Vulnerability Assessment Methodologies
• Trend Analysis
• Compliance Reporting
• Dashboard Reporting
• Data Security
• Network Security
• Encryption

Soft Skills

• Analytical Skills
• Technical Support

Certifications & Qualifications

• Active Secret Security Clearance
• FEMA EOD Suitability

Industry Keywords

• Cybersecurity
• Vulnerability Management
• DHS
• DoD
• Audit Activities
• Compliance Frameworks
• Remediation Work Plans
• POA&M
• Risk Management
• Network Vulnerabilities

Tools & Technologies

• Qualys
• DbProtect
• WebInspect
• Tenable
• Tableau
• Power BI
• Splunk
• Automated Scanning Tools
• Security Authorization Tools
• DISA STIGs