Vulnerability Management – CTEM Specialist

🔥 14 hours ago

🇺🇸 United States – Remote

⏳ Contract/Temporary

🟡 Mid-level

🟠 Senior

👻 Ghost score 24%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Dragonfli Group

WebsiteLinkedInAll Job Openings

11 - 50 employees

🔒 Cybersecurity

💼 Consulting

Cybersecurity • Consulting

Dragonfli Group is a Washington, DC based LLC specializing in management and technology consulting. The company transforms its clients’ businesses by leveraging high impact strategic planning and technology solutions coupled with expertise in infrastructure, corporate strategy, and operations. Dragonfli Group’s passionate and experienced consultants take a collaborative approach to provide strategic planning and information security solutions to organizations looking to increase profitability, streamline operations, manage risk, meet regulatory demands, and build market share.

📋 Description

• Lead implementation of a CTEM platform, migrating from a legacy vulnerability management tool • Design and configure connectors, scoring/exploitability models, and consolidation logic across scanners and source systems • Validate data ingestion fidelity across vulnerability scanners and source systems • Design SLA and exploitability/risk-scoring frameworks • Build exception and risk-acceptance workflows • Perform asset/vulnerability de-duplication and inventory reconciliation • Establish critical/high-priority vulnerability escalation processes • Build and validate API-based integrations between the CTEM platform and downstream systems such as ServiceNow • Write Python scripts/automation for data tagging, gap analysis, and reporting • Build role-based dashboards and reporting for analysts, remediation owners, and CISO-level stakeholders • Develop KPI/metrics frameworks for security operations • Author platform configuration documentation, runbooks, and policy/SLA documentation • Support business process mapping and current-state/future-state workflow design • Develop Target Operating Model (TOM) documentation • Support an embedded security team serving a large commercial enterprise in the Financial Services industry

🎯 Requirements

• Experience with Risk-Based Vulnerability Management (RBVM) / CTEM tools and platforms (e.g., Kenna, Zafran, Rapid7, Tenable, Qualys) • Experience with vulnerability management platforms: connectors, scoring/exploitability models, consolidation logic, ticketing integration • Experience validating data ingestion fidelity across scanners and source systems • Experience designing SLA and exploitability/risk-scoring frameworks • Experience with exception and risk-acceptance process design • Experience with asset/vulnerability de-duplication and asset inventory reconciliation • Experience standing up critical/high-priority vulnerability escalation processes • 5+ years of relevant vulnerability management / cybersecurity consulting experience • U.S. Citizenship or Permanent Residency • Ability to work within the continental U.S. • API-based system integration and validation testing experience • Scripting/automation experience, such as Python, for data tagging, gap analysis, and reporting automation • Experience with IT Service Management (ITSM) platforms, such as ServiceNow, including workflow design and ticket lifecycle automation • Experience building role-based dashboards/reporting for technical and executive audiences • Experience developing KPI/metrics frameworks for security operations • Technical writing experience, including platform configuration documentation, runbooks, and policy/SLA documentation • Business process mapping and current-state/future-state workflow design • Experience developing Target Operating Model (TOM) documentation • Cross-functional stakeholder communication • Technical writing and documentation • Process design and facilitation • Ability to work independently within an embedded client team

🏖️ Benefits

• Medical — Multiple POS health plan options including an HSA-compatible plan • Dental — PPO coverage for preventive, basic, and major services • Vision — Annual exam, frames, lenses, and contact lens allowance • 401(k) — Employer match up to 5% of eligible compensation • Long-Term Disability — 100% employer-paid coverage at 50% of pre-disability earnings • Life Insurance & AD&D — 100% employer-paid coverage valued at $10,000 each • PTO — 15–25 days annually based on tenure • Paid Federal Holidays — All 11 federal holidays observed