Vulnerability Management Lead (Cybersecurity)

Location: Remote from the United States, within close proximity to the National Capital Region (NCR), Virginia

Salary: $115,000–$135,000 per year

Company

hirify.global is the federal segment of a global technology organization delivering cybersecurity, data and AI, and enterprise transformation solutions to defense, intelligence, and federal civilian agencies.

What you will do

• Lead enterprise vulnerability scanning, remediation tracking, stakeholder communication, and POA&M support.
• Coordinate with ISOs, ISSOs, compliance teams, engineering personnel, and SOC stakeholders to prioritize and close security gaps.
• Manage Tenable, AquaSec, and Continuous Diagnostics and Mitigation (CDM) integrations across enterprise workflows.
• Develop vulnerability management dashboards, metrics, compliance reports, policies, procedures, and standard operating procedures.
• Correlate vulnerability data with threat intelligence and threat-hunting findings to support continuous monitoring.
• Present risk recommendations, vulnerability findings, and program metrics to technical teams and senior government officials.

Requirements

• U.S. citizenship and the ability to work remotely from within close proximity to the National Capital Region are required.
• Active Public Trust 6c clearance, or the ability to obtain and maintain one.
• At least 6 years of cybersecurity experience with expertise in vulnerability management, operating systems, and networking.
• Hands-on experience with Tenable, AquaSec, and CDM integration in a federal or enterprise environment.
• Knowledge of NIST RMF, NIST SP 800-53, FISMA, and FedRAMP requirements, including POA&M development and remediation tracking.
• At least one of the following certifications: GCIH, CISSP, CISM, or CRISC.

Nice to have

• Bachelor’s degree in cybersecurity, information technology, computer science, or a related field.
• CISA, Tenable Certified Security Engineer, AWS Cloud Practitioner or higher, or CompTIA Security+ certification.
• Experience with AWS GovCloud, Azure Government, federal civilian agency programs, Splunk, Elasticsearch, or DevSecOps vulnerability scanning.
• Knowledge of IRS Publication 1075 and OMB compliance requirements.

Culture & Benefits

• Work on a mission-critical federal cybersecurity program involving sensitive financial and personally identifiable information.
• Collaborate across SOC, threat hunting, security engineering, compliance, and government stakeholder teams.
• Contribute to a culture focused on delivery excellence, innovation, accountability, and mission impact.
• Access opportunities for professional development within a large global technology organization.