Vulnerability Management Engineer — Federal RMF & Cloud

Digital Global Connectors; McLean (VA); Hybrid; USD 110,000 - 160,000; Full time

Job summary

Digital Global Connectors is seeking a Vulnerability Management Engineer to lead enterprise vulnerability assessments across servers, endpoints, databases, and cloud environments. The role emphasizes risk-based prioritization, remediation coordination, and validation of fixes within a federal-grade security program.

The candidate will support RMF, STIGs, and compliance reporting while collaborating with SOC, ISSOs, cloud engineers, and system admins to strengthen the organization’s cybersecurity

Qualifications

• Bachelor's degree in Cybersecurity, CS, IT, or related field.
• Minimum four years of enterprise vulnerability management or assessment experience.
• Experience with Tenable, Qualys, Rapid7, Defender Vulnerability Management, or similar platforms.
• Experience supporting Windows, Linux, network, cloud, and hybrid environments.
• US Citizenship required; ability to obtain Tier 2 Public Trust.

Responsibilities

• Conduct enterprise vulnerability assessments across servers, workstations, databases, networks, cloud, apps and endpoints.
• Prioritize vulnerabilities using risk-based methodologies and coordinate remediation with teams.
• Validate remediation and monitor aging vulnerabilities; escalate as needed.
• Support RMF, STIG, CIS benchmarks, and security configuration compliance.
• Develop reports and metrics to inform security leadership.

Skills

Vulnerability Management

Vulnerability Assessments

Risk-Based Prioritization

Communication Skills

Team Collaboration

Education

Bachelor's degree in Cybersecurity/CS/IT

Master's degree in Cybersecurity/Info Assurance

Tools

Tenable Security Center

Nessus

Qualys VMDR

Rapid7 InsightVM

Microsoft Defender Vulnerability Management

AWS Inspector

Azure Security Center

Job description

Digital Global Connectors is seeking a Vulnerability Management Engineer to lead enterprise vulnerability assessments across servers, endpoints, databases, and cloud environments. The role emphasizes risk-based prioritization, remediation coordination, and validation of fixes within a federal-grade security program.

The candidate will support RMF, STIGs, and compliance reporting while collaborating with SOC, ISSOs, cloud engineers, and system admins to strengthen the organization’s cybersecurity