Senior Vulnerability Management Lead

Req ID: 41848

Summary

Senior Vulnerability Management Lead

Washington, D.C.

Are you ready to enhance your skills and build your career in a rapidly evolving business climate? Are you looking for a career where professional development is embedded in your employers core culture? If so, Chenega Military, Intelligence & Operations Support (MIOS) could be the place for you! Join our team of professionals who support large-scale government operations by leveraging cutting-edge technology and take your career to the next level!

Chenega Systems (CS) provides federal agencies empowered solutions in Cybersecurity and Data Visualization. Our Subject Matter Experts offer decades of experience working in the federal marketplace and the data visualization environment.

The Senior Vulnerability Management Lead performs assessments of systems and networks within the enterprise environment and identifies where those systems/networks deviate from acceptable configurations, organizational policy, and/or local policy. This role also measures the effectiveness of defense-in-depth architecture against known vulnerabilities.

Responsibilities

• Analyze the organization's cyber defense policies and configurations and evaluate compliance with regulations and organizational directives.
• Maintain deployable cyber defense audit toolkit (e.g., specialized cyber defense software and hardware) to support cyber defense audit missions.
• Maintain knowledge of applicable cyber defense policies, regulations, and compliance documents specifically related to cyber defense auditing.
• Prepare audit reports that identify technical and procedural findings and provide recommended remediation strategies/solutions.
• Perform technical (evaluation of technology) and nontechnical (evaluation of people and operations) risk and vulnerability assessments of relevant technology focus areas (e.g., local computing environment, network and infrastructure, enclave boundary, supporting infrastructure, and applications).
• Perform and coordinate scans on different types of assets within an organization, such as cloud services and on-premises networks.
• Prepare summary reports that are compiled from newly discovered and existing vulnerabilities.
• Report risk levels to the other teams to address them appropriately.
• Offer insights on trends to guide future vulnerability management analyst roles and responsibilities improvements.
• Other duties as assigned

Qualifications

• Bachelors degree in Cybersecurity, Information Technology, Engineering, or a related field
• Additional years of experience may be used in lieu or a degree
• 5+ years of experience in cybersecurity with direct ownership or leadership of a vulnerability or exposure management program in an enterprise environment
• CompTIA Security+, ISC(2) SSCP, or comparable industry certification
• Must be able to pass a Criminal and Financial Background Check and drug screening prior to starting

Preferred Qualifications:

• Masters degree in Cybersecurity, Information Technology, Engineering, or a related field
• 5+ years of experience in cybersecurity with direct ownership or leadership of a vulnerability or exposure management program in an enterprise environment
• ISC(2) CISSP, ISACA CISA, or comparable advanced industry certifications
• Hands-on experience with vulnerability management platforms such as Rapid7, Tenable, Wiz, or similar solutions
• Experience integrating vulnerability data with CMDB, asset inventory systems, and security telemetry sources
• Experienced with automation and scripting for operational efficiency (e.g., PowerShell, Python)
• Ability to drive execution and accountability across multiple teams without direct authority.
• Strong written and verbal communication skills, with the ability to translate technical issues into business risk language.
• Demonstrates flexibility and responsiveness to changing priorities and critical security needs.

Knowledge, Skills and Abilities:

• Knowledge of network security architecture concepts including topology, protocols, components, and principles (e.g., application of defense-in-depth).
• Knowledge of how traffic flows across the network (e.g., Transmission Control Protocol [TCP] and Internet Protocol [IP], Open System Interconnection Model [OSI], Information Technology Infrastructure Library, current version [ITIL]).
• Knowledge of application vulnerabilities.
• Knowledge of system and application security threats and vulnerabilities (e.g., buffer overflow, mobile code, cross-site scripting, Procedural Language/Structured Query Language [PL/SQL] and injections, race conditions, covert channel, replay, return-oriented attacks, malicious code).
• Knowledge of what constitutes a network attack and a network attack's relationship to both threats and vulnerabilities.
• Knowledge of penetration testing principles, tools, and techniques.
• Skill in conducting vulnerability scans and recognizing vulnerabilities in security systems.
• Skill in using network analysis tools to identify vulnerabilities (e.g., fuzzing, Nmap, etc.).
• Skill in conducting application vulnerability assessments.

How youll grow

At Chenega MIOS, our professional development plan focuses on helping our team members at every level of their careers to identify and use their strengths to do their best work every day. From entry-level employees to senior leaders, we believe theres always room to learn.

We offer opportunities to help sharpen skills in addition to hands-on experience in the global, fast-changing business world. From on-the-job learning experiences to formal development programs, our professionals have a variety of opportunities to continue to grow throughout their careers.

Benefits

At Chenega MIOS, we know that great people make a great organization. We value our team members and offer them a broad range of benefits.

Learn more about what working at Chenega MIOS can mean for you.

Chenega MIOSs culture

Our positive and supportive culture encourages our team members to do their best work every day. We celebrate individuals by recognizing their uniqueness and offering them the flexibility to make daily choices that can help them be healthy, centered, confident, and aware. We offer well-being programs and continuously look for new ways to maintain a culture where we excel and lead healthy, happy lives.

Corporate citizenship

Chenega MIOS is led by a purpose to make an impact that matters. This purpose defines who we are and extends to relationships with our clients, our team members, and our communities. We believe that business has the power to inspire and transform. We focus on education, giving, skill-based volunteerism, and leadership to help drive positive social impact in our communities.

Learn more about Chenegas impact on the world.

Chenega MIOS News- ;br>
Tips from your Talent Acquisition Team

We want job seekers exploring opportunities at Chenega MIOS to feel prepared and confident. To help you with your research, we suggest you review the following links:

Chenega MIOS web site - ;br>
Glassdoor - _IE369514.11,23.htm

LinkedIn - ;br>
Facebook - ;br>
#Chenega Systems, LLC

Estimated Salary/Wage

USD $119,700.00/Yr. Up to USD $150,000.00/Yr.

Chenega Corporation and family of companies is an EOE.

Equal Opportunity Employer/Veterans/Disabled

Native preference under PL 93-638.

We participate in the E-Verify Employment Verification Program