If you are a current State of Maine employee, please submit your application through the internal application process using the Find Jobs report in PRISM. Seasonal employees who do not have PRISM access should apply through the State's career page and indicate on the application that they have previously worked for the State.Office of Information TechnologyOpening Date: October 20, 2026
Closing Date: November 3, 2026
Grade / Admin Unit: 29 / Professional/Technical
Job Class Code: 0871
Salary: $74,845.68 - $105,056.22*/Annually (*Includes a 15% recruitment and retention stipend)
Position Number: 004250736
Location: Augusta
Telework: Partial telework options are available after 3 months, with management approval
Currently, this position is not eligible for visa sponsorship or STEM OPT extensions.DESCRIPTION: As the Vulnerability Management Team Lead, you'll provide operational leadership, technical direction, and program oversight for the Information Security Office's enterprise Vulnerability Management and Application Testing program. This role offers the opportunity to guide vulnerability identification, validation, prioritization, remediation coordination, application security testing, reporting, metrics development, and continuous improvement across State systems, applications, cloud services, network environments, and enterprise technology assets.
You'll work closely with SOC leadership, ISO teams, skilled contractor personnel, application teams, infrastructure teams, agency stakeholders, vendors, service providers, and leadership to improve enterprise visibility into cybersecurity risk. The position supports vulnerability scanning, application testing, limited penetration testing, remediation tracking, secure software development practices, dashboarding, metrics, reporting, and program documentation.
This position also plays a key role in coordinating assigned program resources, advising leadership, supporting risk-informed decision-making, guiding remediation priorities, and ensuring vulnerability management and application testing activities align with ISO priorities and statewide cybersecurity needs.
We are seeking a highly talented individual who will represent our
C.A.R.E. values in all that they do.
At MaineIT we:
- Practice Customer-focus, ensuring that our customers are heard, and their needs are met
- Hold ourselves to a high level of Accountability by being transparent with our stakeholders
- Maintain an effective level of Responsiveness by providing timely updates in a proactive manner
- Strive to provide Empathy-driven, people-focused services by applying emotional intelligence skills and behaviors
WHAT YOU'LL DO:No two days look quite the same in MaineIT's Information Security Office. In general, you can expect to:
- Lead Vulnerability Management Operations: Assign and prioritize work, coordinate daily operational coverage, conduct follow-up, guide skilled contractor personnel, support program readiness, and help ensure vulnerability management and application testing work is completed accurately, consistently, and timely.
- Oversee the Enterprise Vulnerability Management Program: Lead vulnerability identification, scanning coverage, validation, prioritization, remediation tracking, exception review preparation, and reporting across State systems, applications, cloud services, network environments, and enterprise technology assets.
- Lead Application Security Testing: Coordinate testing intake, testing activities, analysis, validation, documentation, and communication of application vulnerabilities, including support for secure software development practices and remediation recommendations.
- Administer Security Testing Platforms: Configure, maintain, tune, and improve vulnerability management and application testing platforms to support reliable scanning, accurate results, effective reporting, data aggregation, workflow management, and operational visibility.
- Develop Reporting and Metrics: Build and maintain dashboards, KPIs, KRIs, reports, templates, executive summaries, operational briefings, and trend analysis materials that support risk-informed decision-making and program accountability.
- Coordinate Remediation Activities: Work with application teams, infrastructure teams, agency stakeholders, vendors, and service providers to communicate findings, clarify risk, track remediation progress, resolve capability gaps, and escalate unresolved or high-risk issues.
- Support Security Analysis and Testing: Conduct and coordinate limited penetration testing, vulnerability validation, root-cause review, and technical analysis to identify infrastructure, application, configuration, and process weaknesses.
- Provide Technical Guidance: Advise the Security Operations Center Manager, ISO leadership, technical teams, vendors, service providers, and stakeholders regarding vulnerability management, application testing, remediation priorities, tool use, operational risks, and program improvements.
- Support Security Initiatives and Projects: Participate in stakeholder meetings; analyze technical and operational requirements; contribute to secure software development improvements; develop metrics; produce reports; and deliver briefings or presentations to support informed decision-making.
- Maintain Program Documentation: Develop, document, and maintain standard operating procedures, testing procedures, remediation workflows, vulnerability management playbooks, knowledge articles, workflow diagrams, and supporting operational documentation.
- Support Training and Knowledge Sharing: Provide training, mentoring, and instructional materials on vulnerability review, application testing, security tooling, remediation processes, and response procedures to improve readiness, consistency, and response effectiveness.
WHY THIS ROLE STANDS OUT:As a cybersecurity professional, you have a lot of options when it comes to your career. We get it. Here's what sets our role apart:
- Enterprise Risk Visibility: Take a leadership role in identifying, validating, prioritizing, and communicating security weaknesses affecting enterprise technology environments.
- Program Leadership: Help guide a fully developed enterprise Vulnerability Management and Application Testing program with statewide cybersecurity impact.
- Application Security Experience: Work with application testing activities, secure development practices, remediation coordination, and application risk reduction across a large public-sector environment.
- Mission-Driven Public Service: Strengthen the capabilities that help protect critical government systems, applications, services, and sensitive information.
- Enterprise-Scale Impact: Support vulnerability visibility and risk reduction across State systems, cloud services, applications, network environments, and other enterprise technology assets.
- Technical Leadership Opportunities: Guide program resources, coordinate stakeholders, advise leadership, improve workflows, refine reporting, and mature vulnerability management and testing practices.
- Strategic Program Involvement: Contribute to testing coverage discussions, risk prioritization methods, dashboard improvements, KPI/KRI development, remediation tracking, and operational planning.
- Continuous Improvement: Help improve program maturity through data quality improvements, reporting enhancements, workflow refinement, secure software development recommendations, and documentation updates.
WHY YOU'LL LOVE WORKING FOR MAINEIT:If you are seeking a culture that supports growth, fosters success, and want to play a key role in maintaining the confidentiality, integrity, and availability of State of Maine data and systems, then MaineIT is where you need to be. With the MaineIT Information Security Office, you can expect:
- Generous Telework Opportunities: This position can work up to 90% remotely with management approval.
- Meaningful & Impactful Work: Lead vulnerability management and application testing activities that support statewide cybersecurity risk reduction.
- Supportive Team: Join a collaborative, professional environment that invests in your development and values operational excellence.
- Work-Life Balance: Flexible scheduling and a healthy balance of professional and personal time.
- Innovative Culture: Be part of a team that values modernization, program maturity, continuous improvement, and practical security outcomes.
- Professional Growth: Work with evolving vulnerability management platforms, application testing tools, security testing methods, remediation workflows, metrics, and enterprise-scale cybersecurity challenges.
MINIMUM QUALIFICATIONS:
A minimum of 8 years of a combination of related post-secondary education, technical certifications, or technology related work experience. Related training, internship experience etc. may be credited as related experience on a month-per-month basis.
Preference will be given to candidates who possess the following:- Working knowledge of vulnerability management practices, application security testing, vulnerability assessment, remediation coordination, risk prioritization, and security operations.
- Experience administering, configuring, tuning, or supporting vulnerability management or application testing platforms such as Rapid7, Tenable, Qualys, Microsoft Defender Vulnerability Management, HCL AppScan, Burp Suite, OWASP ZAP, or comparable technologies.
- Experience coordinating vulnerability scanning, application testing intake, remediation tracking, exception review preparation, validation activities, or vulnerability reporting across enterprise environments.
- Experience with secure software development practices, OWASP Top 10 risks, dynamic or static application testing concepts, manual testing methods, penetration testing concepts, or cloud/container vulnerability review.
- Demonstrated ability to guide technical personnel, coordinate assigned resources, support operational coverage, and manage competing priorities across active cybersecurity programs.
- Experience communicating vulnerability findings, remediation priorities, risk trends, and operational recommendations to technical and non-technical audiences.
- Experience developing or maintaining dashboards, KPIs, KRIs, executive summaries, operational metrics, testing procedures, remediation workflows, playbooks, knowledge articles, or program documentation.
- Experience working with application teams, infrastructure teams, vendors, service providers, agency stakeholders, contractor personnel, or cross-functional technical teams.
- Professional certifications such as CISSP, CISM, Security+, CySA+, CEH, PenTest+, GPEN, GWAPT, GWEB, OSCP, or comparable credentials.
APPLICATION INSTRUCTIONS: Please submit a cover letter along with a current resume and three (3) professional references.
In order for us to properly determine if you meet the minimum qualifications for any posting, you must be sure your resume includes the month and year for any relevant experience listed. Your resume should include the duties and responsibilities associated with each position. Any experience that was not full-time employment should be identified as such.
CONTACT INFORMATION: For more information or questions specific to the position, please contact
The selected candidate will be required to pass the required background checks (fingerprinting may be required) as a condition of employment.Benefits of working for the State of Maine: No matter where you work across Maine state government, you find employees who embody our state motto-"Dirigo" or "I lead"-as they provide essential services to Mainers every day. We believe in supporting our workforce's health and wellbeing with a valuable total compensation package, including:
- Work-Life Balance - Rest is essential. Take time for yourself using 13 paid holidays, 12 days of sick leave, and 3+ weeks of vacation leave annually. Vacation leave accrual increases with years of service, and overtime-exempt employees receive personal leave.
- Health Insurance Coverage - The State of Maine pays 85%-100% of employee-only premiums ($11,857.68-$13,950.24 annual value), depending on salary. Use this chart to find the premium costs for you and your family, including the percentage of dependent coverage paid by the State.
- Health Insurance Premium Credit - Participation decreases employee-only premiums by 5%. Visit the Office of Employee Health and Wellness for more information about program requirements.
- Dental Insurance - The State of Maine pays 100% of employee-only dental premiums ($365.28 annual value).
- Retirement Plan - The State of Maine contributes 14.06% of pay to the Maine Public Employees Retirement System (MainePERS), on behalf of the employee.
- Gym Membership Reimbursement - Improve overall health with regular exercise and receive up to $40 per month to offset this expense.
- Health and Dependent Care Flexible Spending Accounts - Set aside money pre-tax to help pay for out-of-pocket health care expenses and/or daycare expenses.
- Public Service Student Loan Forgiveness - The State of Maine is a qualified employer for this federal program. For more information, visit the Federal Student Aid office.
- Living Resources Program - Navigate challenging work and life situations with our employee assistance program.
- Parental leave is one of the most important benefits for any working parent. All employees who are welcoming a child-including fathers and adoptive parents-receive forty-two (42) consecutive calendar days of fully paid parental leave. Additional, unpaid leave may also be available, under the Family and Medical Leave Act.
- Voluntary Deferred Compensation - Save additional pre-tax funds for retirement in a MaineSaves 457(b) account through payroll deductions.
State employees are eligible for an extensive and highly competitive benefits package, covering many aspects of wellness. Learn about
additional wellness benefits for State employees from the Office of Employee Health and Wellness.
Note: Benefits may vary somewhat according to specific collective bargaining agreements and are prorated for anything less than full-time.
There's a job and then there's purposeful, transformative work. Our aim is to create a workplace where you can learn, grow, and continuously refine your skills. Applicants demonstrate job requirements in differing ways, and we appreciate that many skills and backgrounds can make people successful in this role.
As an Equal Opportunity employer, Maine State Government embraces a culture of respect and awareness. We are committed to creating a strong sense of belonging for all team members, and our process ensures an inclusive environment to applicants of all backgrounds including diverse race, color, sex, sexual orientation or gender identity, physical or mental disability, religion, age, ancestry, national origin, familial status or genetics.
If you're looking for a great next step, and want to feel good about what you do, we'd love to hear from you. Please note reasonable accommodations are provided to qualified individuals with disabilities upon request.
Thinking about applying? Research shows that people from historically excluded communities tend to apply to jobs only when they check every box in the posting. If you're currently reading this and hesitating to apply for that reason, we encourage you to go for it! Let us know how your experience and passion set you apart.
If you require a paper application, please download and print one HERE
If you are unable to complete the online application, please contact the Human Resources representative listed on the job opening you are interested in applying for. They will work with you for an alternative method of submitting. 
