[Hiring] Vulnerability Management Lead @True Zero Technologies

Role Description

True Zero Technologies is seeking an experienced Vulnerability Management Lead to oversee enterprise vulnerability identification, assessment, remediation tracking, and security risk reduction initiatives within complex federal environments. This leadership position is responsible for coordinating vulnerability management activities across cybersecurity, engineering, and compliance teams, ensuring timely remediation of identified security weaknesses, and supporting federal cybersecurity reporting and compliance requirements.

Job Responsibilities

• Enterprise Vulnerability Management & Assessment: Lead and oversee vulnerability scanning, assessment, prioritization, and remediation tracking across federal enterprise systems, networks, applications, cloud environments, and infrastructure to identify and reduce security risks.
• Vulnerability Remediation & POA&M Coordination: Manage vulnerability remediation workflows, monitor corrective action progress, and coordinate with Plan of Action and Milestones (POA&M) support teams to ensure security findings are accurately documented, prioritized, tracked, and resolved within established timelines.
• Cross-Functional Security Collaboration: Partner with Information System Owners (ISOs), Information System Security Officers (ISSOs), compliance personnel, engineering teams, and technical stakeholders to validate vulnerability findings, address security control deficiencies, and coordinate remediation activities.
• Cyber Hygiene & Web Application Security Programs: Lead Cyber Hygiene and Web Application Scanning Program (WASP) activities, coordinating vulnerability assessments, scan scheduling, findings analysis, and remediation efforts to improve enterprise security posture and maintain compliance with applicable federal cybersecurity requirements.
• Vulnerability Management Tools & Integration: Oversee the implementation, configuration, maintenance, and optimization of enterprise vulnerability management technologies, including Tenable, Aqua Security, and Continuous Diagnostics and Mitigation (CDM) integrations, to support comprehensive security visibility and consistent vulnerability reporting.
• Security Metrics, Dashboards & Reporting: Develop and maintain vulnerability management dashboards, key performance indicators (KPIs), remediation metrics, and executive-level reports to monitor vulnerability trends, remediation progress, risk exposure, and overall program effectiveness.
• Risk Prioritization & Continuous Improvement: Evaluate vulnerability severity, exploitability, asset criticality, and operational risk to establish remediation priorities, identify recurring security weaknesses, and recommend improvements to vulnerability management processes, policies, and technical controls.

Requirements

• Cybersecurity & Vulnerability Management Experience: Minimum of 6 years of progressive cybersecurity experience, including hands-on vulnerability assessment, security monitoring, remediation coordination, and risk management responsibilities within complex enterprise environments.
• Professional Certifications: Must possess at least one of the following certifications: GIAC Certified Incident Handler (GCIH), Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or Certified in Risk and Information Systems Control (CRISC).
• Vulnerability Management Technologies & Integration: Demonstrated hands-on experience with Tenable, Aqua Security (AquaSec), and Continuous Diagnostics and Mitigation (CDM) technologies, including vulnerability scanning, security findings analysis, remediation tracking, and integration of vulnerability data across enterprise security platforms.
• Operating Systems, Networking & Security Infrastructure: Strong technical understanding of Windows and Linux operating systems, network protocols, enterprise infrastructure, and security configurations, with the ability to assess vulnerabilities across on-premises, cloud, and containerized environments.
• Federal Compliance, Reporting & Stakeholder Coordination: Experience coordinating vulnerability remediation activities with security, compliance, and engineering stakeholders, including familiarity with POA&M processes, federal cybersecurity requirements, vulnerability reporting, and the development of actionable security metrics and dashboards.
• Security Clearance: Required to meet requirements for High Risk/ Public Trust Contractor Positions.