Cybersecurity Vulnerability Management Team Lead

🔥 13 hours ago

🇺🇸 United States – Remote

💵 $165k - $170k / year

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 0%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Cherokee Federal

WebsiteLinkedInAll Job Openings

5001 - 10000 employees

Founded 1969

🏥 Healthcare

📦 Logistics

🏭 Manufacturing

Healthcare • Logistics • Manufacturing

Cherokee Federal is a U. S. federal systems integrator and government contractor that empowers mission success for more than 60 U. S. federal agencies. With a global workforce of over 5,000, it delivers advanced technology (cloud, cybersecurity, data & analytics), health services, intelligence analysis and operational support, logistics and sustainment, mission-critical manufacturing, program and engineering technical services, and dynamic contracting solutions to support federal priorities and national security. Cherokee Federal is part of Cherokee Nation Businesses and focuses on mission-focused, U. S. -made solutions.

📋 Description

• Lead and mature NSF’s vulnerability management capability across enterprise, cloud, containerized, application, and hybrid environments • Provide technical leadership to vulnerability analysts and foster accountability, ownership, collaboration, and continuous improvement • Develop and maintain a vulnerability management roadmap aligned with evolving threats and organizational priorities • Apply CISA KEV, EPSS, threat intelligence, asset criticality, internet-facing asset identification, attack path analysis, and MITRE ATT&CK mapping to prioritize exposures • Evaluate emerging technologies that improve vulnerability validation, attack surface visibility, and exposure management • Advance exposure reduction, detection engineering, continuous validation, cloud-native security, and automation • Own discovery, validation, prioritization, remediation coordination, exception handling, verification, and executive reporting • Operate and optimize Tenable.sc, Tenable.io, and Nessus • Improve scan coverage, credential management, accuracy, and false-positive reduction • Integrate findings from AWS Inspector, Security Hub, GuardDuty, Wiz, Prisma Cloud, and Microsoft Defender for Cloud • Partner with Application Security and DevSecOps teams on AppScan, DAST, SAST, CI/CD integrations, and container image scanning • Mature ServiceNow Vulnerability Response through CMDB enrichment, automated ticket creation, SLA tracking, ownership assignment, and escalation workflows • Identify and develop automation opportunities using APIs, Python, PowerShell, and orchestration capabilities • Build executive dashboards covering MTTR, SLA adherence, vulnerability aging, exposure trends, scan coverage, and remediation effectiveness • Brief cybersecurity leadership on emerging risks, remediation progress, and program maturity • Provide technical leadership to a small team of vulnerability analysts • Perform other job-related duties as assigned

🎯 Requirements

• 8+ years of cybersecurity experience • 4+ years of direct vulnerability management experience in a federal or large enterprise environment • 3+ years leading vulnerability analysts, remediation programs, or enterprise vulnerability management initiatives • Deep hands-on expertise with Tenable.sc, Tenable.io, and Nessus • Experience implementing or significantly improving a Vulnerability Management or Exposure Management capability • Experience with ServiceNow Vulnerability Response and CMDB integrations • Experience using CISA KEV, EPSS, threat intelligence, asset criticality, and attack path analysis to prioritize vulnerabilities • Experience supporting AWS, Azure, or hybrid cloud environments • Experience working with Security Operations and Incident Response teams to identify and rapidly remediate actively exploited vulnerabilities • Experience briefing technical teams, executives, and federal stakeholders • Prolonged periods of sitting at a desk and working on a computer; may occasionally require standing or moving about the office for extended periods • Must pass pre-employment qualifications of Cherokee Federal • Preferred certifications and experience include SafeBreach, AttackIQ, Pentera, XM Cyber, Wiz, Prisma Cloud, AppScan, BAS, CCV, EASM, Kubernetes security, detection engineering, CISSP, GCIH, CySA+, Security+, Tenable Certified Professional, AWS Security Specialty, and ServiceNow Vulnerability Response Certification

🏖️ Benefits

• Up to a 6% 401(k) company match • Paid time off • Medical, dental, and vision insurance, plus prescription drug coverage • Basic life and AD&D insurance, with supplemental life options • Short-term and long-term disability coverage • Paid holidays • Employee Assistance Program (EAP) • Flexible Spending Account (FSA) and Health Savings Account (HSA) options • Professional development, training, and certification support • Voluntary accident, critical illness, and identity theft protection

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume