Vulnerability Management Engineer — Remediation Leader

CACI International; Washington; On-site; USD 75,000 - 158,000; Full time

Job summary

CACI International is seeking a Vulnerability Management Engineer to support FEMA OCISO in Washington, D.C. You will lead vulnerability identification, assessment, remediation coordination, and closure validation across FEMA systems, working with system owners and cybersecurity professionals to reduce risk.

This role requires U.S. citizenship, a BS/BA with 6 years in vulnerability management, and hands-on experience with Qualys and other scanning tools.

Qualifications

• U.S. Citizenship required.
• FEMA EOD suitability or current DHS/FEMA EOD preferred.
• BS/BA + 6 years of experience in vulnerability management and cybersecurity.
• Demonstrated expertise with Qualys.
• Experience with other vulnerability scanning tools (dbProtect, WebInspect, or Tenable).
• Knowledge of vulnerability assessment methodologies and risk analysis.
• Strong analytical skills for vulnerability prioritization and trend analysis.

Responsibilities

• Administer scanning processes across FEMA systems and analyze findings for risk and accuracy.
• Coordinate remediation efforts across Enterprise systems and provide daily technical remediation support.
• Produce dashboards, surge reporting, and vulnerability reduction reports; validate closure.
• Support audits and tracking of remediation activities; maintain remediation plans.
• Develop test reports within 5 days after testing and communicate with leadership as required.

Skills

Analytical skills

Vulnerability prioritization

Trend analysis

Risk analysis

Education

BS/BA in a related field

Tools

Qualys

dbProtect

WebInspect

Tenable

Automated security authorization tools

Job description

CACI International is seeking a Vulnerability Management Engineer to support FEMA OCISO in Washington, D.C. You will lead vulnerability identification, assessment, remediation coordination, and closure validation across FEMA systems, working with system owners and cybersecurity professionals to reduce risk.

This role requires U.S. citizenship, a BS/BA with 6 years in vulnerability management, and hands-on experience with Qualys and other scanning tools.