Vulnerability Management Engineering Lead

G2IT; Quantico (VA); On-site; USD 100,000 - 130,000; Full time

Job summary

G2IT is seeking an experienced Vulnerability Management Engineering Lead to join our cybersecurity team supporting a critical DoD mission in Quantico, VA. You will lead vulnerability analysis, patch management, and compliance across thousands of endpoints in highly secure environments.

You will work with cybersecurity engineers, system admins, and leadership to identify vulnerabilities, prioritize remediation, and maintain DoD cybersecurity standards, including RMF and STIG compliance.

Qualifications

• U.S. Citizenship required.
• Active Top Secret clearance with SCI eligibility and current investigation currency.
• Minimum 4 years in cybersecurity, DoD, or federal environments; degree may be substituted with 4 years experience.
• Experience with vulnerability scanning and remediation planning.

Responsibilities

• Lead vulnerability management across enterprise systems, analyzing scans and prioritizing remediation.
• Develop and coordinate remediation plans for CAT I–III findings to meet DoD requirements.
• Engineer and deploy OS and third-party patches using MECM/SCCM and Intune.
• Evaluate systems against DISA STIGs using STIG Viewer and SCAP tools.
• Maintain POA&Ms in eMASS and document risks and progress.
• Collaborate with ISSOs and admins to automate processes and reduce remediation timelines.
• Produce security reports and metrics for leadership and government stakeholders.

Skills

Leadership

Cybersecurity expertise

Vulnerability management

Analytical skills

Documentation

Communication skills

Independent work

Education

Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field

DoD 8570/8140 IAT Level II certification (e.g., Security+ CE, CySA+, GSEC, SSCP)

Tools

ACAS

Nessus

MECM/SCCM

Microsoft Intune

DISA STIG Viewer

SCAP Compliance Checker

eMASS

Job description

Vulnerability Management Engineering Lead

Vulnerability Management Engineering Lead

Location: Quantico, VA (Onsite - Russell-Knox Building)
Company: G2IT
Security Clearance: Active Top Secret with SCI Eligibility (TS/SCI)

About the Opportunity

G2IT is seeking an experienced Vulnerability Management Engineering Lead to join our cybersecurity team supporting a critical Department of Defense (DoD) mission in Quantico, VA.

This is an excellent opportunity for a cybersecurity professional who enjoys solving complex security challenges, strengthening enterprise defenses, and protecting mission-critical government networks.

In this role, you will lead vulnerability analysis, patch management, security compliance, and remediation efforts across thousands of endpoints operating in highly secure environments, including NIPRNet, SIPRNet, and JWICS.

You will work with cybersecurity engineers, system administrators, and security leadership to identify vulnerabilities, prioritize remediation, improve security processes, and maintain compliance with DoD cybersecurity standards.

If you have hands-on experience with ACAS, Nessus, DISA STIGs, MECM/SCCM, and eMASS, we encourage you to apply!

Key Responsibilities

Lead Vulnerability Management: Analyze ACAS/Nessus scan results to identify, assess, and prioritize security vulnerabilities across enterprise systems.

Drive Security Remediation: Develop and coordinate remediation plans for CAT I, II, and III vulnerabilities, ensuring compliance with DoD requirements and established deadlines.

Manage Patch Deployment: Engineer, test, and deploy operating system and third-party security patches using MECM/SCCM and Microsoft Intune.

Improve Security Compliance: Evaluate systems against DISA STIGs using STIG Viewer, SCAP Compliance Checker, and other security assessment tools.

Support Risk Management: Maintain Plans of Action and Milestones (POA&Ms) in eMASS, documenting security risks, mitigation strategies, and remediation progress.

Troubleshoot Security Issues: Investigate patch failures, non‑compliant endpoints, and recurring vulnerabilities to identify root causes and implement solutions.

Develop Security Reports: Produce vulnerability assessments, STIG compliance reports, and cybersecurity metrics for leadership and government stakeholders.

Collaborate Across Teams: Work closely with ISSOs, system administrators, and cybersecurity personnel to coordinate remediation and maintain security standards.

Enhance Security Processes: Identify opportunities to automate vulnerability management, improve patch deployment, and reduce remediation timelines.

Required Qualifications

U.S. Citizenship is required.

Active Top Secret clearance with SCI eligibility and a favorably adjudicated Tier 5/Tier 5 Reinvestigation (T5/T5R), with investigation currency or Continuous Evaluation/Vetting eligibility.

Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field, plus at least 4 years of relevant experience. An additional 4 years of relevant experience may substitute for the degree.

Minimum 4 years of experience in cybersecurity, vulnerability management, security compliance, or RMF continuous monitoring within DoD or federal environments.

Current DoD 8570/8140 IAT Level II certification, such as Security+ CE, CySA+, GSEC, SSCP, or another qualifying certification.

Hands-on experience with ACAS/Nessus vulnerability scanning and analysis.

Experience using DISA STIG Viewer and SCAP Compliance Checker to assess system security.

Familiarity with MECM/SCCM, patch management, and enterprise endpoint security.

Experience maintaining POA&Ms, security documentation, and compliance evidence in eMASS.

Knowledge of NIST SP 800-53, Risk Management Framework (RMF), DISA STIGs, and DoD cybersecurity requirements.

Understanding of Windows and Linux operating systems, Active Directory, networking, and endpoint management.

Strong troubleshooting, analytical, documentation, and communication skills.

Ability to work independently and effectively collaborate with technical and cybersecurity teams.

Preferred Qualifications

Experience supporting DoD, Department of War, or Intelligence Community networks.

Experience working across classified and unclassified environments, including NIPRNet, SIPRNet, and JWICS.

Knowledge of Microsoft Intune, HBSS/ESS, and enterprise security monitoring tools.

Familiarity with USCYBERCOM/JFHQ-DODIN directives and IAVM compliance requirements.

Experience creating cybersecurity dashboards and reports using Power BI.

Experience with ServiceNow or similar IT Service Management (ITSM) platforms.

Experience improving vulnerability management workflows through automation.

Why Join G2IT?

At G2IT, you will have the opportunity to apply your cybersecurity expertise to a meaningful national defense mission while working alongside experienced IT and security professionals.

This position offers the chance to take ownership of enterprise vulnerability management initiatives, contribute to security improvements, and help protect critical government information systems.

Annual Salary: $100,000-$130,000, depending on experience and qualifications.

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey.Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiringprocess or thereafter. Any information that you do provide will be recorded and maintained in aconfidential file.

As set forth in G2IT’s Equal Employment Opportunity policy,we do not discriminate on the basis of any protected group status under any applicable law.

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection.As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measurethe effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categoriesis as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.