Vulnerability Management Engineer - Remediation & Risk

Jobtailor; Washington (District of Columbia); On-site; USD 110,000 - 150,000; Full time

Job summary

FEMA Office of the Chief Information Security Officer in Washington, D.C. seeks a skilled vulnerability management professional to lead identification, remediation coordination, and closure validation across FEMA systems.

You will administer scanning tools (Qualys, Tenable, etc.), develop RWPs, dashboards, and reports for leadership, and support audits while ensuring compliance with DISA STIGs and security frameworks.

Qualifications

• U.S. Citizenship required.
• FEMA EOD suitability or current DHS or FEMA EOD preferred
• BS/BA plus 6 years of applicable experience in vulnerability management and cybersecurity
• Demonstrated expertise with Qualys
• Experience with vulnerability scanning tools such as dbProtect, WebInspect, or Tenable
• Experience with automated security authorization tools
• Knowledge of vulnerability assessment methodologies and risk analysis
• Strong analytical skills for vulnerability prioritization and trend analysis
• Active Secret security clearance desired
• Previous DHS or DoD experience desired
• Experience managing and administering automated scanning tools desired
• Knowledge of DISA STIGs and security compliance frameworks desired
• Experience with dashboard and reporting tools such as Tableau, Power BI, or Splunk desired
• Experience supporting audit activities desired

Responsibilities

• Lead vulnerability identification, prioritization, remediation coordination, and closure validation
• Administer scanning processes across FEMA systems
• Analyze vulnerability findings for risk and accuracy
• Monitor FEMA systems Remediation Work Plans (RWPs)
• Coordinate remediation efforts across enterprise systems
• Provide daily technical remediation support services
• Produce dashboards and surge reporting for critical vulnerabilities
• Provide vulnerability reduction reports and trend analysis reports
• Analyze vulnerability reports and remediation efforts and report to leadership as required
• Conduct monthly POA&M remediation test events
• Develop test reports within 5 days after testing
• Validate vulnerability closures
• Provide monthly compliance remediation briefs
• Utilize automated security authorization tools to manage remediation efforts and POA&M
• Support internal and external audit events
• Track and suggest technologies, processes, and practices to protect networks, devices, programs, and data
• Research and maintain proficiency in tools, techniques, countermeasures, and trends in computer and network vulnerabilities, data hiding, network and device security, and encryption

Skills

Vulnerability Management

Analytical Skills

Risk Analysis

Technical Support

Education

Bachelor's degree

Tools

Qualys

dbProtect

WebInspect

Tenable

Tableau

Power BI

Splunk

Automated Scanning Tools

Security Authorization Tools

DISA STIGs

Job description

FEMA Office of the Chief Information Security Officer in Washington, D.C. seeks a skilled vulnerability management professional to lead identification, remediation coordination, and closure validation across FEMA systems.

You will administer scanning tools (Qualys, Tenable, etc.), develop RWPs, dashboards, and reports for leadership, and support audits while ensuring compliance with DISA STIGs and security frameworks.