Vulnerability Management Engineer: Remediation Dashboards

CACI International Inc.; Washington, Northern (District of Columbia, KY); Hybrid; USD 75,000 - 158,000; Full time

Job summary

CACI International Inc. is seeking a Vulnerability Management Engineer to support FEMA's OCISO in Washington, D.C. You will lead vulnerability identification, prioritization, remediation coordination, and closure validation across enterprise systems, ensuring risk is understood and mitigated.

You will administer scanning processes (Qualys and other tools), develop dashboards and reports, and coordinate with system owners and security professionals to protect critical mission systems. U.S.

Qualifications

• BS/BA in a related field with at least 6 years of experience in vulnerability management.
• Experience with Qualys and other vulnerability scanning tools.
• Knowledge of vulnerability assessment methodologies and risk analysis.

Responsibilities

• Administer scanning processes across FEMA systems and analyze vulnerability findings for risk and accuracy.
• Coordinate remediation efforts across Enterprise systems and provide daily technical remediation support.
• Produce dashboards and surge reports for critical vulnerabilities and track remediation status.
• Validate closure of vulnerabilities and support monthly POA&M remediation activities.
• Assist internal and external audits with remediation evidence and reporting.

Skills

Qualys

Vulnerability management

Risk analysis

Remediation coordination

POA&M

Audit support

Education

BS/BA in related field

Tools

Qualys

dbProtect

WebInspect

Tenable

Tableau

Power BI

Splunk

Job description

CACI International Inc. is seeking a Vulnerability Management Engineer to support FEMA's OCISO in Washington, D.C. You will lead vulnerability identification, prioritization, remediation coordination, and closure validation across enterprise systems, ensuring risk is understood and mitigated.

You will administer scanning processes (Qualys and other tools), develop dashboards and reports, and coordinate with system owners and security professionals to protect critical mission systems. U.S.