Mid-Level Vulnerability Management Engineer

🕒 July 17

🦀 Maryland – Remote

🦀 Maryland – Remote

💵 $80k - $105k / year

⏳ Contract/Temporary

🟡 Mid-level

🟠 Senior

👷🏻‍♀️ Engineer

👻 Ghost score 3%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

K2United

WebsiteLinkedInAll Job Openings

51 - 200 employees

💼 Consulting

🏥 Healthcare

🔒 Cybersecurity

Consulting • Healthcare • Cybersecurity

K2United houses K2Share and CareerSafe, two brands dedicated to creating impactful solutions for their clients' success. K2Share specializes in cybersecurity consulting, offering services related to information assurance, cyber risk management, and security awareness training. CareerSafe excels in online OSHA training and career-focused education. Founded by Dr. Larry Teverbaugh, K2United emphasizes innovation and a positive work environment, aiming to unite its dual brands under a shared purpose.

📋 Description

• Manage, operate, and maintain vulnerability-management infrastructure capable of performing credentialed scans across approved client-managed systems, devices, and applications. • Perform host-based, network-based, application, and database vulnerability scanning and deliver actionable remediation guidance. • Analyze scan results and network architecture to identify the highest-risk vulnerabilities and recommend appropriate mitigation steps. • Conduct specialized assessments for High Value Assets (HVAs) and other designated systems, ensuring reports meet HVA requirements. • Support the implementation, operation, and maintenance of vulnerability-management projects within client's Information Security Project Dashboard. • Alert technical points of contact to risks posed by vulnerabilities, missing assets, configuration errors, and unauthorized software or hardware. • Escalate critical vulnerabilities within 24 hours and track remediation to closure in accordance with applicable federal, department, and agency policy and contractual remediation timelines. • Monitor the CISA Known Exploited Vulnerabilities (KEV) Catalog and other authoritative sources to support timely remediation and compliance with applicable Binding Operational Directives. • Coordinate with program areas and system owners to prioritize mitigation steps, including end-user mitigation activities when needed. • Provide risk analysis for identified vulnerabilities and system change requests. • Drive findings to verified closure through ticketed workflows, coordinating with the separate technical teams that perform system patching, and validate remediation through authenticated re-scans with recorded evidence. • Maintain regular communication with client and department stakeholders to support collaboration, process improvement, tool tuning, information sharing, and compromise response. • Monitor government and private-sector vulnerability sources to identify emerging risks that may affect client-managed systems. • Contribute to vulnerability management reporting and ad hoc compliance deliverables supporting department, DHS, and FISMA requirements.

🎯 Requirements

• Bachelor's degree in a related field, or equivalent experience as allowed by company and contract policy. • Five or more years of hands-on enterprise vulnerability management and scanning experience. • Experience administering enterprise scanning platforms such as Tenable.sc, Nessus, Qualys, Rapid7, or similar tools. • Experience performing credentialed scanning at scale across hybrid environments. • Experience with host-based, network-based, application, and database vulnerability scanning. • Direct experience tracking and remediating vulnerabilities against the CISA KEV Catalog and CISA Binding Operational Directives 22-01 and 26-04, successor directives. • Familiarity with High Value Asset (HVA) assessment requirements. • Working knowledge of NIST SP 800-53 Rev. 5, FISMA, and FIPS 199. • Strong analytical, organizational, and communication skills with the ability to work effectively across technical and government stakeholders. • Ability to meet federal background investigation requirements.

🏖️ Benefits

• 401(k) with employer matching • Low-cost medical coverage for employees and their families • Paid time off • Paid leave for jury duty, military service, voting, and other qualifying events • Wellness stipend, including fitness reimbursement • Tuition assistance • Casual work environment • Technical training and certification support • Complimentary access to CareerSafe online training courses for employees and their immediate family