Vulnerability Manager Lead

Dark Wolf Solutions, LLC; Herndon (VA); Hybrid; USD 155,000 - 160,000; Full time

Job summary

Dark Wolf Solutions, LLC is seeking a Vulnerability Management Lead to oversee security operations across a large-scale, multi-tenant cloud government system, including AI/LLM workloads. The role partners with engineering teams, admins, and leadership to drive the full vulnerability lifecycle from detection to remediation.

The ideal candidate has federal/DoD vulnerability management experience, cloud security expertise, and strong SQL and reporting skills to automate workflows, generate

Qualifications

• 6+ years of experience in Cybersecurity, Vulnerability Management, or Systems Administration supporting federal or DoD information systems.
• Direct, hands-on experience utilizing ACAS (Tenable.sc) to filter, analyze, and report on enterprise vulnerabilities.
• Operational understanding of the SCAP ecosystem, including DISA STIG benchmarks and vulnerability scanning compliance.
• Proficiency with Splunk Enterprise Security and Trellix (ESS) correlation with vulnerability monitoring.
• Practical experience writing SQL queries for reporting and analytics.
• Proficiency with Jira to track and manage technical workflows through completion.
• Excellent communication skills to translate complex vulnerabilities into actionable guidance for IT teams.
• Solid understanding of AWS services and how vulnerabilities manifest in cloud-native environments.
• Active DoD 8570/8140 IAT Level II certification (e.g., Security+, CySA+).
• U.S. Citizenship with an active Top Secret security clearance.

Responsibilities

• Oversee daily vulnerability identification, triage, and reporting across AWS cloud assets, hybrid infrastructure, and AI/LLM stacks.
• Evaluate raw vulnerability data from ACAS and AWS tools to determine true risk and context.
• Leverage ACAS for SCAP-based configuration audits and DISA STIG alignment.
• Monitor end-to-end remediation lifecycle and document progress.
• Manage cybersecurity vulnerability tickets in Jira for audit trails.
• Act as primary contact for hands-on IT staff, clearly communicating remediation steps.
• Translate vulnerabilities into POA&Ms with milestones and business impact.
• Translate AI/LLM security risks into concrete remediation guidance for cross-functional teams.
• Cross-reference exploit intelligence with known vulnerabilities to refine risk prioritization.
• Deliver vulnerability posture reports, dashboards, and executive briefings for stakeholders.
• Mentor mid-level analysts in triage, AI threat vectors, and automation.

Skills

ACAS T enable.sc

SQL queries

Vulnerability mgmt

Cloud security

Risk assessment

Jira

Communication

DoD compliance

AWS

Security+ CySA+

Tools

ACAS (Tenable.sc)

Splunk Enterprise Security

Trellix ESS

Jira

DISA STIG

Job description

Dark Wolf is seeking aVulnerability Management Lead to oversee technical vulnerability operations, modern AI workload security, and compliance baselines across a large-scale, multi-tenant cloud government system. Working closely with cross-functional engineering teams, system administrators, and program leadership, the Lead will drive the end-to-end vulnerability lifecycle from initial detection through final remediation.

We are seeking a collaborative cybersecurity professional with a solid foundation in federal or DoD vulnerability management, cloud environments, and technical risk assessment. This position offers the opportunity to lead operational workflows, leverage data analysis (SQL) and tool integrations (REST APIs) to automate reporting, and help shape security strategies for modern platforms—including emerging AI/LLM workloads.

Whether you are an experienced Lead or a Senior Vulnerability/Systems Analyst ready to take the next step in leadership, this role provides an impactful platform to guide technical risk decisions across a mission-critical system. This position is based out of Arlington, VA with hybrid/remote opportunities. Additional responsibilities include:

Key Responsibilities

• Oversee daily vulnerability identification, triage, and reporting across AWS cloud assets, traditional hybrid infrastructure, and AI/LLM application stacks.
• Evaluate raw vulnerability data generated by ACAS (Tenable.sc) and AWS security tools to determine its actual threat vector; identify true contextual risk based on compensating controls, network exposure, and the system's specific cloud architecture.
• Leverage ACAS to execute and analyze SCAP-compliant configuration audits, verifying system alignment with established DISA STIG security benchmarks and identifying configuration drift across cloud assets.
• Monitor, document, and track the end-to-end lifecycle of technical remediation efforts.
• Establish and manage cybersecurity vulnerability tickets within Jira to maintain a clear audit trail from identification to closure.
• Serve as a primary point of contact for hands‑on IT support, system administrators, and engineers; clearly communicate the technical details of vulnerabilities, outline required remediation steps, and assist in prioritizing patches.
• Translate un‑remediated, high‑true‑risk vulnerabilities into actionable Plan of Action and Milestones (POA&Ms), clearly detailing the technical milestones and business impacts.
• Translate complex technical findings and AI‑specific security risks into concrete, step‑by‑step remediation guidance for platform, data science, and DevOps engineering teams.
• Collaborate with the team to cross‑reference active exploit intelligence against known system vulnerabilities, refining true risk prioritizations based on active real‑world threats.
• Compile and deliver vulnerability posture reports, metrics dashboards, and executive briefings for government stakeholders.
• Mentor mid‑level analysts on triage methodologies, emerging AI threat vectors, technical writing, and workflow automation.

Required Qualifications

• 6+ years of experience in Cybersecurity, Vulnerability Management, or Systems Administration supporting federal or DoD information systems.
• Direct, hands‑on experience utilizing ACAS (Tenable.sc) to filter, analyze, and report on enterprise vulnerabilities.
• Operational understanding of the Security Content Automation Protocol (SCAP) ecosystem, including how automated configuration audit files translate into compliance metrics within vulnerability scanners.
• Comprehensive understanding of how Splunk Enterprise Security and Trellix (ESS) correlate with vulnerability monitoring activities
• Practical experience writing SQL queries for reporting and/or analytics
• Proven proficiency utilizing Jira (or equivalent enterprise ticketing infrastructure) to track, update, and manage technical workflows through completion.
• Excellent interpersonal and written communication skills, with a demonstrated ability to translate complex security vulnerabilities into actionable guidance for IT personnel.
• Solid understanding of core AWS services (EC2, VPC, Security Groups, IAM) and how vulnerabilities manifest within a cloud‑native environment.
• Must hold an active DoD 8570/8140 IAT Level II certification (e.g., Security+, CySA+).
• U.S. Citizenship with an active Top Secret security clearance

Desired Qualifications

• Possess a valid DISA certification for ACAS, Trellix, or Splunk issued or renewed within the last three years, or demonstrate the capability to successfully obtain the required DISA certification upon hire.
• Familiarity with tracking vulnerabilities across containerized microservices (Docker/Kubernetes) or modern data platforms like Databricks.
• Ability to identify and evaluate vulnerabilities unique to AI/LLM environments, including model training/inference pipelines, API endpoints, microservices, and AI framework dependencies (e.g., PyTorch, LangChain, Hugging Face) using frameworks like the OWASP Top 10 for LLM Applications.

The salary range for this position is estimated to be between $155,000.00 - $160,000.00, commensurate on experience and technical skillset.

We are proud to be an EEO/AA employer Minorities/Women/Veterans/Disabled and other protected categories.

In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification form upon hire.

We are strictly looking for direct, full‑time W2 employees. We do not engage with third‑party staffing agencies, C2C, or 1099 independent contractors for this role.

Voluntary Self-Identification:For government reporting purposes, we ask candidates to respond to the below self-identification survey. Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiring process or thereafter. Any information that you do provide will be recorded and maintained in a confidential file.As set forth in Dark Wolf Solutions's Equal Employment Opportunity policy, we do not discriminate on the basis of any protected group status under any applicable law.Gender: * Select...

Voluntary Self-IdentificationFor government reporting purposes, we ask candidates to respond to the below self-identification survey. Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiring process or thereafter. Any information that you do provide will be recorded and maintained in a confidential file.As set forth in Dark Wolf Solutions's Equal Employment Opportunity policy, we do not discriminate on the basis of any protected group status under any applicable law.Are you Hispanic/Latino? * Select...

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection. As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measure the effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categories is as follows:A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service‑connected disability.A "recently separated veteran" means any veteran during the three‑year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.Veteran Status: * Select...

Form CC-305OMB Control Number 1250-0005Expires 05/31/2023Voluntary Self-Identification of DisabilityWhy are you being asked to complete this form?We are a federal contractor or subcontractor required by law to provide equal employment opportunity to qualified people with disabilities. We are also required to measure our progress toward having at least 7% of our workforce be individuals with disabilities. To do this, we must ask applicants and employees ...