Vulnerability Management Team Lead - Application Security

Department of Administrative and Financial Services; Augusta (ME); Hybrid; USD 75,000 - 105,000; Full time

Benefits offered by this job

Generous telework opportunities

Meaningful & impactful work

Supportive team

Job summary

Maine Office of Information Technology is seeking a Vulnerability Management Team Lead to guide enterprise vulnerability management and application testing across State systems, cloud, and networks. You will work with SOC leadership, ISO teams, vendors, and agency stakeholders to improve cybersecurity visibility and risk decisions.

The role emphasizes leadership, program oversight, secure software practices, and strong reporting. Telework options exist after onboarding, with management approval.

Qualifications

• 8 years minimum of related post‑secondary education, certifications, or technology-related work experience.
• Experience with vulnerability management practices, application testing, risk prioritization, and remediation coordination.
• Experience administering or supporting vulnerability management or application testing platforms (Rapid7, Tenable, Qualys, Microsoft Defender Vulnerability Management, Burp Suite, OWASP ZAP).
• Ability to guide technical personnel, coordinate resources, and communicate findings to technical and non‑technical audiences.

Responsibilities

• Lead Vulnerability Management Operations: prioritize work, coordinate coverage, and guide contractor personnel.
• Oversee the Enterprise Vulnerability Management Program across systems, cloud services, and networks.
• Lead Application Security Testing: coordinate testing intake, analysis, and remediation recommendations.
• Administer Security Testing Platforms: configure and optimize platforms for reliable scanning and reporting.
• Develop Reporting and Metrics: build dashboards, KPIs, and executive summaries.

Skills

Vulnerability management

Application testing

Security metrics

Leadership

Stakeholder communication

Tools

Rapid7

Tenable

Qualys

Burp Suite

OWASP ZAP

Job description

Maine Office of Information Technology is seeking a Vulnerability Management Team Lead to guide enterprise vulnerability management and application testing across State systems, cloud, and networks. You will work with SOC leadership, ISO teams, vendors, and agency stakeholders to improve cybersecurity visibility and risk decisions.

The role emphasizes leadership, program oversight, secure software practices, and strong reporting. Telework options exist after onboarding, with management approval.