Vulnerability Management Lead

Peraton; Oregon; Híbrido; USD 104 000 - 166 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Medical

Dental

Vision

Life Insurance

Health Savings Account

Short/Long Term Disability

EAP

Parental leave

401(k)

PTO

Company holidays

Resumo da oferta

Peraton is seeking a Vulnerability Management Lead to drive remediation across enterprise infrastructure, applications, and cloud environments. This remote role requires coordinating with ISOs, ISSOs, compliance teams, and engineering stakeholders to improve security posture and timely remediation.

The position emphasizes dashboards, KPIs, and reporting to senior leadership, with experience using Tenable and Aqua Security, and familiarity with CDM programs and ATO processes.

Qualificações

• Must be a U.S. Citizen with the ability to obtain and maintain the required Public Trust level clearance
• Bachelor's degree and 12 years of experience, a Masters Degree and 10 years of experience, an Associates Degree and 14 years, or a High School Diploma or equivalent and 16 years of experience
• One (or more) of the following certifications: GCIH, CISSP, CISM or CRISC
• Demonstrated experience managing vulnerability management programs, including vulnerability identification, risk-based prioritization, remediation tracking, and reporting.
• Experience developing, maintaining, and tracking Plans of Action and Milestones (POA&Ms) to support vulnerability remediation and security compliance.
• Working knowledge of continuous monitoring processes, security control assessments, and Authorization to Operate (ATO) support activities.
• Experience using vulnerability management tools such as Tenable and cloud security platforms such as Aqua Security to identify, assess, and track security vulnerabilities.
• Familiarity with Continuous Diagnostics and Mitigation (CDM) programs, tool integrations, and enterprise vulnerability reporting requirements.
• Experience developing dashboards, metrics, and reports to communicate vulnerability trends, remediation progress, risk exposure, and compliance status.
• Ability to coordinate remediation activities with Information System Owners (ISOs), Information System Security Officers (ISSOs), compliance teams, and engineering stakeholders.
• Knowledge of cybersecurity policies, security assessment processes, and applicable regulatory and compliance requirements.

Responsabilidades

• Lead vulnerability management activities across enterprise infrastructure, applications, and cloud environments, ensuring vulnerabilities are identified, assessed, prioritized, tracked, and remediated in accordance with organizational security requirements.
• Manage and maintain Plans of Action and Milestones (POA&Ms), tracking remediation progress, documenting security findings, and coordinating with stakeholders to ensure timely closure of identified weaknesses.
• Support Authorization to Operate (ATO) processes by providing vulnerability assessment results, remediation evidence, risk assessments, and supporting documentation required for security authorization and compliance activities.
• Develop and maintain dashboards, metrics, and management reports to communicate vulnerability trends, remediation status, risk exposure, compliance posture, and program effectiveness to technical teams and senior leadership.
• Collaborate with Information System Owners (ISOs), Information System Security Officers (ISSOs), compliance teams, and engineering stakeholders to coordinate remediation efforts, resolve technical challenges, and ensure alignment with security policies and regulatory requirements.
• Administer, maintain, and optimize vulnerability management tools, including Tenable and Aqua Security (AquaSec), to improve vulnerability visibility, assessment coverage, and remediation workflows.
• Support the integration of vulnerability management data with the Continuous Diagnostics and Mitigation (CDM) program and associated tools to improve enterprise-wide visibility, reporting, and continuous monitoring capabilities.
• Establish and track key performance indicators (KPIs) and metrics, such as vulnerability remediation timelines, risk reduction, overdue findings, and remediation compliance, to drive accountability and continuous program improvement.

Conhecimentos

Vulnerability management

POA&M tracking

Security dashboards

Cross-functional collaboration

Regulatory compliance

Formação académica

Bachelor's degree + 12 years

Master's degree + 10 years

Associate degree + 14 years

High School diploma + 16 years

Ferramentas

Tenable

Aqua Security

Cloud security platforms

Descrição da oferta de emprego

Peraton Overview

Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world's leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees do the can't be done by solving the most daunting challenges facing our customers. Visit peraton.com to learn how we're keeping people around the world safe and secure.

Responsibilities

The Vulnerability Management Lead partners closely with security operations, infrastructure, cloud, application development, and business teams to establish effective remediation processes, enforce security standards, and improve vulnerability management maturity. The role also drives automation, reporting, and performance measurement while providing actionable risk insights to technical teams and senior leadership to support informed decision-making and strengthen the organization’s overall security posture.

Work Location:

This is a remote position, but candidate must be willing to work during the hours of 8am - 5pm EST

What You Will Do:

• Lead vulnerability management activities across enterprise infrastructure, applications, and cloud environments, ensuring vulnerabilities are identified, assessed, prioritized, tracked, and remediated in accordance with organizational security requirements.
• Manage and maintain Plans of Action and Milestones (POA&Ms), tracking remediation progress, documenting security findings, and coordinating with stakeholders to ensure timely closure of identified weaknesses.
• Support Authorization to Operate (ATO) processes by providing vulnerability assessment results, remediation evidence, risk assessments, and supporting documentation required for security authorization and compliance activities.
• Develop and maintain dashboards, metrics, and management reports to communicate vulnerability trends, remediation status, risk exposure, compliance posture, and program effectiveness to technical teams and senior leadership.
• Collaborate with Information System Owners (ISOs), Information System Security Officers (ISSOs), compliance teams, and engineering stakeholders to coordinate remediation efforts, resolve technical challenges, and ensure alignment with security policies and regulatory requirements.
• Administer, maintain, and optimize vulnerability management tools, including Tenable and Aqua Security (AquaSec), to improve vulnerability visibility, assessment coverage, and remediation workflows.
• Support the integration of vulnerability management data with the Continuous Diagnostics and Mitigation (CDM) program and associated tools to improve enterprise-wide visibility, reporting, and continuous monitoring capabilities.
• Establish and track key performance indicators (KPIs) and metrics, such as vulnerability remediation timelines, risk reduction, overdue findings, and remediation compliance, to drive accountability and continuous program improvement.

Qualifications

Basic Qualifications:

• Must be a U.S. Citizen with the ability to obtain and maintain the required Public Trust level clearance
• Bachelors Degree and 12 years of experience, a Masters Degree and 10 years of experience, an Associates Degree and 14 years, or a High School Diploma or equivalent and 16 years of experience
• One (or more) of the following certifications: GCIH, CISSP, CISM or CRISC
• Demonstrated experience managing vulnerability management programs, including vulnerability identification, risk-based prioritization, remediation tracking, and reporting.
• Experience developing, maintaining, and tracking Plans of Action and Milestones (POA&Ms) to support vulnerability remediation and security compliance.
• Working knowledge of continuous monitoring processes, security control assessments, and Authorization to Operate (ATO) support activities.
• Experience using vulnerability management tools such as Tenable and cloud security platforms such as Aqua Security to identify, assess, and track security vulnerabilities.
• Familiarity with Continuous Diagnostics and Mitigation (CDM) programs, tool integrations, and enterprise vulnerability reporting requirements.
• Experience developing dashboards, metrics, and reports to communicate vulnerability trends, remediation progress, risk exposure, and compliance status.
• Ability to coordinate remediation activities with Information System Owners (ISOs), Information System Security Officers (ISSOs), compliance teams, and engineering stakeholders.
• Knowledge of cybersecurity policies, security assessment processes, and applicable regulatory and compliance requirements.

Target Salary Range $104,000 - $166,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual’s experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.

Benefits Statement

• medical
• dental
• vision
• life
• health savings account
• short/long term disability
• EAP
• parental leave
• 401(k)
• paid time off (PTO) for vacation
• company paid holidays

A full listing of available benefits can be viewed at benefits.

EEO EEO: Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.