[Hiring] Vulnerability Management & Cybersecurity Lead @General Dynamics Information Technology

Role Description

Seize your opportunity to make a personal impact as a VULNERABILITY ASSESSMENT ANALYST SME supporting the Department of Veterans Affairs (VA). At GDIT, you will help ensure today is safe and tomorrow is smarter.

As the Vulnerability Management & Cybersecurity Lead, you will serve as the senior technical authority directing VA’s enterprise vulnerability management, RMF/ATO compliance, KEV remediation, and Common Control governance across Infrastructure Operations Application Services.

Your leadership drives continuous monitoring excellence, risk mitigation, audit readiness, and secure operation of mission-critical systems supporting Veteran health, benefits, and enterprise services.

How a Vulnerability Assessment Analyst SME Will Make an Impact

• Lead enterprise vulnerability management, RMF/ATO execution, POA&M oversight, KEV remediation, and continuous monitoring across 130+ system boundaries and millions of endpoints.
• Ensure compliance with FISMA, NIST, CISA directives, OMB memoranda, VA Handbook 6500, and Zero Trust modernization goals.
• Oversee RMF artifacts, system documentation, inventories, baselines, privacy artifacts, and ATO packages.
• Direct cybersecurity integration across ICAM, PKI, WebOps, Middleware, Virtualization, Printer Security, Database, and OC/CMOP teams.
• Lead KEV/aged vulnerability analysis, stakeholder notifications, trend reporting, and remediation tracking.
• Produce dashboards, scorecards, posture reports, continuous monitoring artifacts, and executive-level metrics.
• Oversee Common Controls governance, evidence collection, control reviews, and compliance validation.
• Lead coordinated remediation, escalation workflows, RCA processes, and unified cybersecurity situational awareness.
• Drive modernization across vulnerability management, RMF automation, Zero Trust alignment, cloud security improvements, and enterprise hardening.

Qualifications

• Bachelor’s degree and 12+ years of experience in enterprise cybersecurity, vulnerability management, RMF/ATO operations, or federal IT program leadership.
• Experience overseeing large-scale federal cybersecurity programs across multiple technical domains.
• Deep understanding of federal cybersecurity frameworks: NIST SP 800‑53, 800‑30, 800‑63, 800‑207, FISMA, RMF, CISA BOD requirements, Zero Trust, TIC 3.0, OMB cybersecurity mandates.
• Proven ability to lead cross-functional engineering teams in multi-vendor environments.
• Experience with enterprise vulnerability management programs (KEV remediation, continuous monitoring, posture evaluation).
• Demonstrated skills in program management, stakeholder communication, audit readiness, and performance reporting.
• Strong strategic, analytical, organizational, and executive-level communication skills.
• Ability to support escalations, major incident coordination, and enterprise governance activities.

Requirements

• Must be able to obtain a Public Trust clearance.

Benefits

• Mission-focused culture supporting those who serve.
• AI-powered career advancement tools and robust internal mobility.
• Competitive pay, benefits, 401(k) match, and wellness programs.
• A collaborative, innovative, military-friendly workplace.
• Opportunities to modernize VA’s cybersecurity posture, strengthen vulnerability management, and lead enterprise transformation across critical national systems.