Vulnerability Management Lead (R-00254)

True Zero Technologies; Washington (District of Columbia); On-site; USD 150,000 - 190,000; Full time

Job summary

True Zero Technologies seeks an experienced Vulnerability Management Lead to coordinate enterprise vulnerability identification, assessment, remediation tracking, and risk reduction across federal environments.

The role requires hands-on expertise with vulnerability scanning technologies, security frameworks, and federal programs, aligning engineering, compliance, and cybersecurity teams to sustain secure operations.

Qualifications

• 6+ years of progressive cybersecurity experience with hands-on vulnerability assessment and risk management in complex enterprise environments.
• Certifications: GCIH, CISSP, CISM, or CRISC.
• Experience with Tenable, Aqua Security and CDM integrations and security data across platforms.
• Strong Windows and Linux OS, network, and security infrastructure knowledge.

Responsibilities

• Lead and oversee vulnerability scanning, assessment, prioritization, and remediation tracking across federal enterprise systems, networks, apps, cloud environments, and infrastructure.
• Coordinate remediation workflows and POA&M activities to ensure timely closure of findings.
• Partner with ISOs, ISSOs, compliance, and engineering teams to validate findings and drive remediation.
• Lead Cyber Hygiene and WASP activities to improve posture and maintain compliance with federal requirements.
• Oversee vulnerability management tool implementation, configuration, and reporting integrations to ensure visibility.

Skills

Vulnerability management

Security risk assessment

Cross-functional collaboration

Policy & governance

Education

Bachelor's degree in Cybersecurity or related field

Tools

Tenable

Aqua Security

CDM

Job description

True Zero Technologies, a veteran-owned small business, was founded on the principle that the purposeful enablement of people and technology in an organization directly ties to the quality of its outcomes. True Zero recognizes that those outcomes begin and end with our people, and that is what we have built a community of like-minded, driven, and passionate individuals and innovators who are aligned in a common goal of delivering top-tier services to our customers. Our culture and commitment have been recognized through numerous accolades, including being named one of the Best Places to Work in 2023 in two categories (“Prosperous and Thriving” ($5MM–$50MM in gross revenue) and “Mid-Atlantic Region” (DC, DE, MD, NC, VA, WV)), and again in 2025 as a Best Places to Work honoree. In addition, True Zero earned coveted spots on the Inc. 5000 list of fastest-growing companies in America in 2022, 2023, and 2025, a testament to our sustained growth driven by our people-first approach and unwavering dedication to excellence.

Position Overview

True Zero Technologies is seeking an experiencedVulnerability Management Leadto oversee enterprise vulnerability identification, assessment, remediation tracking, and security risk reduction initiatives within complex federal environments. This leadership position is responsible for coordinating vulnerability management activities across cybersecurity, engineering, and compliance teams, ensuring timely remediation of identified security weaknesses, and supporting federal cybersecurity reporting and compliance requirements.

The ideal candidate will possess extensive hands‑on vulnerability management experience, strong technical and analytical capabilities, and expertise in enterprise vulnerability scanning technologies, security compliance frameworks, and federal cybersecurity programs.

Job Responsibilities

• Enterprise Vulnerability Management & Assessment: Lead and oversee vulnerability scanning, assessment, prioritization, and remediation tracking across federal enterprise systems, networks, applications, cloud environments, and infrastructure to identify and reduce security risks.
• Vulnerability Remediation & POA&M Coordination: Manage vulnerability remediation workflows, monitor corrective action progress, and coordinate with Plan of Action and Milestones (POA&M) support teams to ensure security findings are accurately documented, prioritized, tracked, and resolved within established timelines.
• Cross-Functional Security Collaboration: Partner with Information System Owners (ISOs), Information System Security Officers (ISSOs), compliance personnel, engineering teams, and technical stakeholders to validate vulnerability findings, address security control deficiencies, and coordinate remediation activities.
• Cyber Hygiene & Web Application Security Programs: Lead Cyber Hygiene and Web Application Scanning Program (WASP) activities, coordinating vulnerability assessments, scan scheduling, findings analysis, and remediation efforts to improve enterprise security posture and maintain compliance with applicable federal cybersecurity requirements.
• Vulnerability Management Tools & Integration: Oversee the implementation, configuration, maintenance, and optimization of enterprise vulnerability management technologies, including Tenable, Aqua Security, and Continuous Diagnostics and Mitigation (CDM) integrations, to support comprehensive security visibility and consistent vulnerability reporting.
• Security Metrics, Dashboards & Reporting: Develop and maintain vulnerability management dashboards, key performance indicators (KPIs), remediation metrics, and executive-level reports to monitor vulnerability trends, remediation progress, risk exposure, and overall program effectiveness.
• Risk Prioritization & Continuous Improvement: Evaluate vulnerability severity, exploitability, asset criticality, and operational risk to establish remediation priorities, identify recurring security weaknesses, and recommend improvements to vulnerability management processes, policies, and technical controls.

Job Requirements

• Cybersecurity & Vulnerability Management Experience: Minimum of 6 years of progressive cybersecurity experience, including hands‑on vulnerability assessment, security monitoring, remediation coordination, and risk management responsibilities within complex enterprise environments.
• Professional Certifications: Must possess at least one of the following certifications: GIAC Certified Incident Handler (GCIH), Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or Certified in Risk and Information Systems Control (CRISC).
• Vulnerability Management Technologies & Integration: Demonstrated hands‑on experience with Tenable, Aqua Security (AquaSec), and Continuous Diagnostics and Mitigation (CDM) technologies, including vulnerability scanning, security findings analysis, remediation tracking, and integration of vulnerability data across enterprise security platforms.
• Operating Systems, Networking & Security Infrastructure: Strong technical understanding of Windows and Linux operating systems, network protocols, enterprise infrastructure, and security configurations, with the ability to assess vulnerabilities across on‑premises, cloud, and containerized environments.
• Federal Compliance, Reporting & Stakeholder Coordination: Experience coordinating vulnerability remediation activities with security, compliance, and engineering stakeholders, including familiarity with POA&M processes, federal cybersecurity requirements, vulnerability reporting, and the development of actionable security metrics and dashboards.
• Security Clearance: Required to meet requirements for High Risk/ Public Trust Contractor Positions.