Vulnerability Management Lead - Senior Security Analyst

AUGUST SCHELL ENTERPRISES, INC.; Bethesda, Northern (MD, KY); Hybrid; USD 110,000 - 160,000; Full time

Job summary

The National Library of Medicine (NLM) in Bethesda, MD is seeking an IT Vulnerability Management Lead / Senior Security Analyst to join our security compliance team. This onsite role collaborates with the ISSO to safeguard NIH IT infrastructure and supports a broad IT program including incident response and security services.

The candidate will lead vulnerability management using Tenable/Nessus, coordinate remediation across IT teams, and ensure compliance with FISMA and FedRAMP.

Qualifications

• Expert knowledge of IT security vulnerabilities and risk assessments.
• Strong knowledge of vulnerability management lifecycle and CVSS2 models.
• Familiarity with securing cloud platforms (AWS and GCP) and hybrid environments.
• Understanding of Windows, Linux/Unix, and network device hardening.
• Experience with enterprise VM platforms (Tenable/Nessus) and reporting.
• Excellent experience applying FISMA and FedRAMP processes and documents.

Responsibilities

• Lead the vulnerability management lifecycle using Tenable.sc, Tenable.io, Nessus Manager, and Nessus scanners.
• Coordinate remediation with IT operations and system owners in a hybrid environment.
• Maintain scan schedules, asset groups, dashboards, and reports; communicate risk posture and remediation progress.
• Define scanner and security center architecture; tune configurations to minimize false positives.
• Develop and maintain documentation for system setup and remediation tracking.
• Support security projects requiring compliance with government policies or standards.

Skills

Vulnerability management

FISMA & FedRAMP

Cloud security (AWS, GCP)

Stakeholder communication

Incident response coordination

Scripting (Python/PowerShell)

Education

Bachelor’s degree in CS/cybersecurity/IT or related field

Tools

Tenable/Nessus

Job description

The National Library of Medicine (NLM) in Bethesda, MD is seeking an IT Vulnerability Management Lead / Senior Security Analyst to join our security compliance team. This onsite role collaborates with the ISSO to safeguard NIH IT infrastructure and supports a broad IT program including incident response and security services.

The candidate will lead vulnerability management using Tenable/Nessus, coordinate remediation across IT teams, and ensure compliance with FISMA and FedRAMP.