Note: The job is a remote job and is open to candidates in USA. System One delivers outsourced services and workforce solutions across North America. The Senior Vulnerability Management Engineer/Lead will provide technical leadership for enterprise vulnerability management across NIH/OD-managed environments, including vulnerability identification, risk prioritization, remediation coordination, reporting, compliance, and staff mentoring.

Responsibilities

• Lead enterprise vulnerability management operations and continuous program improvement
• Manage and optimize vulnerability scanning infrastructure and tools
• Oversee credentialed host, network, application, database, and endpoint vulnerability scanning
• Analyze scan results and prioritize vulnerabilities based on risk and federal requirements
• Lead vulnerability discovery, validation, mitigation, remediation tracking, and closure
• Ensure critical vulnerabilities are escalated and tracked through resolution
• Monitor the CISA Known Exploited Vulnerabilities (KEV) Catalog and other authoritative sources
• Coordinate remediation activities with system owners and technical teams
• Provide risk analysis and technical recommendations for identified vulnerabilities
• Support specialized vulnerability assessments for High Value Assets
• Develop reports, dashboards, metrics, and executive briefings
• Ensure reporting complies with NIH, HHS, CISA, FISMA, and HVA requirements
• Improve tool tuning, asset visibility, and reporting accuracy
• Mentor mid-level and junior staff

Skills

• • Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or related field
• • 8–12 years of cybersecurity experience, including at least 5 years in enterprise vulnerability management
• • Experience with Tenable, Qualys, Rapid7, Microsoft Defender Vulnerability Management, or similar tools
• • Knowledge of CVEs, CVSS, KEVs, NIST guidance, FISMA, CISA directives, and federal vulnerability remediation requirements
• • Strong communication and reporting skills
• • CISSP • CISM • GIAC Certified Enterprise Defender (GCED) • GIAC Certified Vulnerability Assessor (GCVA) • CompTIA CySA+ • Tenable Certified Professional • Qualys VMDR Certification

Benefits

• 99% remote work model with occasional onsite meetings
• Eligible employees have health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, and voluntary plans
• Participation in a 401(k) plan

Company Overview

Company H1B Sponsorship