Vulnerability Management Lead — Federal IT Security

Guidehouse; Bethesda (MD); On-site; USD 85,000 - 141,000; Full time

Benefits offered by this job

Medical, Dental, Vision Insurance

401(k) Retirement Plan

Paid Holidays

Job summary

Guidehouse is seeking a cybersecurity professional to lead vulnerability management across a portfolio of client applications. You will analyze findings, coordinate remediation with engineering and business teams, and ensure timely closure of issues.

Responsibilities include producing automated reports, dashboards, and KPIs to track progress, while supporting POA&M activities and compliance with federal requirements. Strong collaboration and communication are essential for success.

Qualifications

• Minimum of 2+ years of experience in cybersecurity or IT risk management, focusing on vulnerability management preferred.
• Knowledge of NIST SP 800-53, FISMA, and OWASP Top 10.
• Active CompTIA Security+ CE preferred; CISSP/CEH or cloud certifications are a plus.
• Strong written and verbal communication; ability to juggle multiple priorities and deadlines.
• Must obtain and maintain a Federal or DoD Public Trust clearance prior to onboarding.

Responsibilities

• Lead vulnerability management across client applications, analyzing findings and tracking issues to closure.
• Collaborate with business, engineering, and security teams to validate fixes and remove blockers.
• Support POA&M activities, patching timelines, and compliance requirements.
• Develop automated vulnerability reports, dashboards, KPIs, and metrics to monitor remediation progress.
• Prepare reports and briefings for leadership and federal oversight stakeholders.
• Monitor security alerts in Splunk and coordinate follow-ups with teams.
• Provide secure development guidance and annual training support.
• Offer cyber SME expertise during information security audits and assessments.

Skills

Vulnerability management

Cybersecurity

Communication

Analytical thinking

Project management

Education

Bachelor's degree

Tools

Invicti

Splunk

Jira

Confluence

Job description

Guidehouse is seeking a cybersecurity professional to lead vulnerability management across a portfolio of client applications. You will analyze findings, coordinate remediation with engineering and business teams, and ensure timely closure of issues.

Responsibilities include producing automated reports, dashboards, and KPIs to track progress, while supporting POA&M activities and compliance with federal requirements. Strong collaboration and communication are essential for success.