Vulnerability Management Engineering Lead

G2it, Llc.; Quantico (VA); Vor Ort; USD 100.000 - 130.000; Vollzeit

Zusammenfassung

G2IT is seeking an experienced Vulnerability Management Engineering Lead to join our cybersecurity team supporting a critical DoD mission in Quantico, VA. You will lead vulnerability analysis, patch management, security compliance, and remediation across thousands of endpoints in highly secure environments, including NIPRNet, SIPRNet, and JWICS.

You will work with cybersecurity engineers, system administrators, and leadership to identify vulnerabilities, prioritize remediation, and maintain

Qualifikationen

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field; 4+ years of relevant experience (additional 4 years may substitute for the degree).
• DoD 8570/8140 IAT Level II certification (e.g., Security+ CE, CySA+, GSEC, SSCP).
• Hands‑on experience with ACAS/Nessus vulnerability scanning and analysis.

Aufgaben

• Lead vulnerability management across enterprise systems.
• Coordinate remediation plans for CAT I, II, III vulnerabilities with DoD deadlines.
• Engineer, test, and deploy OS and third‑party patches using MECM/SCCM and Microsoft Intune.
• Evaluate systems against DISA STIGs using STIG Viewer, SCAP Compliance Checker, and related tools.
• Maintain POA&Ms in eMASS and document security risks and remediation progress.
• Investigate patch failures and non‑compliant endpoints to identify root causes.
• Produce vulnerability assessments, STIG compliance reports, and cybersecurity metrics for leadership.
• Collaborate with ISSOs, system administrators, and cybersecurity staff to ensure standards.
• Identify opportunities to automate vulnerability management and reduce remediation timelines.

Kenntnisse

Vulnerability analysis

Patch management

Security compliance

RMF continuous monitoring

Troubleshooting

Documentation

Communication

Independent work

Ausbildung

Bachelor's degree in Cybersecurity/IT/CS

Tools

ACAS

Nessus

DISA STIGs

MECM/SCCM

eMASS

Jobbeschreibung

Location: Quantico, VA (Onsite - Russell-Knox Building)

Company: G2IT

Security Clearance: Active Top Secret with SCI Eligibility (TS/SCI)

About The Opportunity

G2IT is seeking an experienced Vulnerability Management Engineering Lead to join our cybersecurity team supporting a critical Department of Defense (DoD) mission in Quantico, VA.

This is an excellent opportunity for a cybersecurity professional who enjoys solving complex security challenges, strengthening enterprise defenses, and protecting mission‑critical government networks.

In this role, you will lead vulnerability analysis, patch management, security compliance, and remediation efforts across thousands of endpoints operating in highly secure environments, including NIPRNet, SIPRNet, and JWICS.

You will work with cybersecurity engineers, system administrators, and security leadership to identify vulnerabilities, prioritize remediation, improve security processes, and maintain compliance with DoD cybersecurity standards.

If you have hands‑on experience with ACAS, Nessus, DISA STIGs, MECM/SCCM, and eMASS, we encourage you to apply!

Key Responsibilities

• Lead Vulnerability Management: Analyze ACAS/Nessus scan results to identify, assess, and prioritize security vulnerabilities across enterprise systems.
• Drive Security Remediation: Develop and coordinate remediation plans for CAT I, II, and III vulnerabilities, ensuring compliance with DoD requirements and established deadlines.
• Manage Patch Deployment: Engineer, test, and deploy operating system and third‑party security patches using MECM/SCCM and Microsoft Intune.
• Improve Security Compliance: Evaluate systems against DISA STIGs using STIG Viewer, SCAP Compliance Checker, and other security assessment tools.
• Support Risk Management: Maintain Plans of Action and Milestones (POA&Ms) in eMASS, documenting security risks, mitigation strategies, and remediation progress.
• Troubleshoot Security Issues: Investigate patch failures, non‑compliant endpoints, and recurring vulnerabilities to identify root causes and implement solutions.
• Develop Security Reports: Produce vulnerability assessments, STIG compliance reports, and cybersecurity metrics for leadership and government stakeholders.
• Collaborate Across Teams: Work closely with ISSOs, system administrators, and cybersecurity personnel to coordinate remediation and maintain security standards.
• Enhance Security Processes: Identify opportunities to automate vulnerability management, improve patch deployment, and reduce remediation timelines.

Required Qualifications

• U.S. Citizenship is required.
• Active Top Secret clearance with SCI eligibility and a favorably adjudicated Tier 5/Tier 5 Reinvestigation (T5/T5R), with investigation currency or Continuous Evaluation/Vetting eligibility.
• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field, plus at least 4 years of relevant experience. An additional 4 years of relevant experience may substitute for the degree.
• Minimum 4 years of experience in cybersecurity, vulnerability management, security compliance, or RMF continuous monitoring within DoD or federal environments.
• Current DoD 8570/8140 IAT Level II certification, such as Security+ CE, CySA+, GSEC, SSCP, or another qualifying certification.
• Hands‑on experience with ACAS/Nessus vulnerability scanning and analysis.
• Experience using DISA STIG Viewer and SCAP Compliance Checker to assess system security.
• Familiarity with MECM/SCCM, patch management, and enterprise endpoint security.
• Experience maintaining POA&Ms, security documentation, and compliance evidence in eMASS.
• Knowledge of NIST SP 800‑53, Risk Management Framework (RMF), DISA STIGs, and DoD cybersecurity requirements.
• Understanding of Windows and Linux operating systems, Active Directory, networking, and endpoint management.
• Strong troubleshooting, analytical, documentation, and communication skills.
• Ability to work independently and effectively collaborate with technical and cybersecurity teams.

Preferred Qualifications

• Experience supporting DoD, Department of War, or Intelligence Community networks.
• Experience working across classified and unclassified environments, including NIPRNet, SIPRNet, and JWICS.
• Knowledge of Microsoft Intune, HBSS/ESS, and enterprise security monitoring tools.
• Familiarity with USCYBERCOM/JFHQ‑DODIN directives and IAVM compliance requirements.
• Experience creating cybersecurity dashboards and reports using Power BI.
• Experience with ServiceNow or similar IT Service Management (ITSM) platforms.
• Experience improving vulnerability management workflows through automation.

Why Join G2IT?

At G2IT, you will have the opportunity to apply your cybersecurity expertise to a meaningful national defense mission while working alongside experienced IT and security professionals.

This position offers the chance to take ownership of enterprise vulnerability management initiatives, contribute to security improvements, and help protect critical government information systems.

Annual Salary: $100,000-$130,000, depending on experience and qualifications.