Tech Lead – Vulnerability Management Technology

🔥 3 minutes ago

🇺🇸 United States – Remote

💵 $154.1k - $278.5k / year

⏰ Full Time

🟠 Senior

🧑‍💻 Full-stack Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Leidos

WebsiteLinkedInAll Job Openings

10,000+ employees

Founded 1969

🏥 Healthcare

💼 Consulting

📦 Logistics

Healthcare • Consulting • Logistics

Leidos is a leading systems integrator in science, technology, and engineering, providing solutions that transform and enable the missions of its customers. The company operates across various markets, including aviation, defense, energy, government, healthcare, intelligence, science, and space. Leidos is involved in AI, digital modernization, cyber operations, and integrated and mission software systems. With a commitment to diversity, equity, inclusion, and sustainability, Leidos also engages in charitable efforts and community enrichment programs. Additionally, it contributes to developing solutions for counter-unmanned aerial systems and electric vehicle infrastructure for military applications.

📋 Description

• Lead the technical delivery of vulnerability management technology improvements across multiple engineering, security, infrastructure, application, cloud, and platform teams • Coordinate cross-team dependencies, priorities, risks, delivery timelines, technical decisions, and implementation activities • Establish and maintain vulnerability management requirements and guide delivery of technical solutions, capabilities, architectures, implementation plans, and measurable outcomes • Promote consistent engineering standards, integration patterns, automation practices, data quality, security controls, and operational processes • Develop and maintain success metrics and reporting frameworks • Support the complete vulnerability management lifecycle, including asset and vulnerability identification, continuous monitoring, risk assessment and prioritization, automated remediation, patch testing and deployment, validation and verification, reporting and metrics, and exception and risk acceptance management • Oversee integration of continuous monitoring, automated security testing, vulnerability intelligence, automated patching, and remediation validation across the technology estate • Oversee end-to-end, machine-driven vulnerability remediation workflows • Coordinate integration of security tools with asset/configuration management, vulnerability scanners, endpoint and patch management, CI/CD, cloud, DevOps, infrastructure automation, IT service management, and reporting platforms • Drive APIs, orchestration, event-driven workflows, infrastructure automation, and policy-as-code to reduce manual handoffs • Ensure automated patching includes deployment rings, canary releases, maintenance windows, pre-deployment testing, rollback, exception handling, and recovery procedures • Collaborate with Product Owners, architects, engineering leads, security teams, operations teams, and delivery stakeholders • Support Agile SAFe ceremonies including PI Planning, backlog refinement, sprint planning, system demos, reviews, and retrospectives • Track delivery progress and resolve technical issues, risks, impediments, and cross-team dependencies • Contribute to roadmaps, solution designs, estimates, business cases, investment proposals, and delivery plans • Ensure solutions are scalable, secure, resilient, supportable, auditable, and aligned with enterprise architecture and cybersecurity requirements • Establish service-level objectives for vulnerability detection, prioritization, remediation, validation, and exception closure • Monitor automation performance using remediation cycle time, automation coverage, patch success rate, rollback rate, validation failure rate, false-positive rate, vulnerability recurrence rate, and manual-intervention metrics • Ensure automated actions are auditable, traceable, policy-compliant, and supported by logging, monitoring, alerting, access controls, and change records • Partner with platform engineering, DevOps, infrastructure, application, cloud, and security teams to embed remediation into development and operational workflows • Lead continuous improvement to increase automation coverage, reduce remediation latency, improve data quality, and remove unnecessary manual intervention • Communicate technical topics, delivery progress, risks, and recommendations to technical and non-technical stakeholders

🎯 Requirements

• Master's degree (or equivalent) and 15+ years of experience • Must have an active Secret clearance • Experience working as a Tech Lead, Technical Delivery Lead, Engineering Lead, Security Engineering Lead, or in a similar technical leadership role • Demonstrated experience coordinating technology delivery across multiple technical teams and organizational boundaries • Experience designing, implementing, or operating automated vulnerability remediation and patch orchestration capabilities • Strong understanding of software development lifecycles, modern engineering practices, application architectures, and operational support models • Practical experience working in Agile environments, preferably using the Scaled Agile Framework (SAFe) • Strong understanding of continuous monitoring, automated security testing, CI/CD, DevSecOps, infrastructure automation, and event-driven integration patterns • Understanding of vulnerability management, cybersecurity operations, security tooling, risk management, and risk-based vulnerability prioritization • Experience integrating vulnerability scanners, endpoint management platforms, configuration management tools, ticketing systems, cloud services, security platforms, and deployment pipelines • Knowledge of automated patch validation, deployment safeguards, release management, rollback strategies, and recovery procedures • Experience using APIs, scripting, workflow automation, orchestration platforms, policy-as-code, or similar automation technologies • Ability to establish automation KPIs and use operational data to improve remediation effectiveness • Ability to balance machine-speed remediation with operational resilience, security controls, compliance obligations, change management, and business continuity • Experience defining governance models, approval thresholds, exception processes, and human-oversight controls for automated changes • Ability to manage technical dependencies, delivery risks, competing priorities, and stakeholder expectations • Strong analytical, problem-solving, communication, facilitation, and influencing skills • Experience leading cross-team adoption of automation and standardizing processes across diverse technology environments • Ability to convert business, security, compliance, and operational requirements into actionable technical requirements and deliverable outcomes • Desirable: Experience with enterprise vulnerability management platforms and security scanning technologies • Desirable: Knowledge of risk-based vulnerability management, vulnerability intelligence, exploitability analysis, and exposure management • Desirable: Experience integrating security tools with IT service management, asset management, configuration management, cloud, DevOps, endpoint, and reporting platforms • Desirable: Experience with automated patching solutions and endpoint or server management technologies • Desirable: Familiarity with deployment rings, canary releases, blue-green deployments, automated rollback, and progressive delivery • Desirable: Experience embedding vulnerability remediation into software development and CI/CD pipelines • Desirable: Familiarity with Agile delivery tools such as Jira, Azure DevOps, or equivalent platforms • Desirable: Experience working in regulated, high-availability, or business-critical technology environments • Desirable: Knowledge of cloud security, container security, infrastructure-as-code, software composition analysis, static application security testing, and dynamic application security testing • Desirable: Relevant certifications in cybersecurity, Agile delivery, architecture, cloud, automation, or project management