Lead Cybersecurity Engineer – Vulnerability & Configuration Management (R-00155)

{
  "content_hash": "a1b7b7867f5a99038953246d757ee875a9e6c6bab8a2947f31f7f716272f427a",
  "source_hash": "25272f1bef57ed9622c0adea6280d9eb209ca9aeba816c023a3daf3a4f0151e0",
  "last_changed_at": "2026-05-29T07:10:49.241Z",
  "active_status": "active"
}

{
  "language": "en",
  "location": {
    "raw": "Washington DC",
    "city": "Washington DC",
    "region": "DC",
    "country": "United States",
    "is_remote": true,
    "confidence": 0.75
  },
  "salary_max": null,
  "salary_min": null,
  "inferred_at": "2026-06-04T11:36:06.350Z",
  "launch_scope": {
    "reason": "english_us_canada",
    "included": true,
    "language": "en",
    "location": {
      "raw": "Washington DC",
      "city": "Washington DC",
      "region": "DC",
      "country": "United States",
      "is_remote": true,
      "confidence": 0.75
    },
    "countries": [
      "United States"
    ]
  },
  "remote_policy": "remote",
  "salary_period": null,
  "workplace_type": "remote",
  "salary_currency": null
}

{}

{
  "lists": [
    {
      "text": "Job Responsibilities ",
      "content": "\n<li data-sfc-root=\"c\" data-sfc-cb=\"\" data-hveid=\"CAMQBA\" data-processed=\"true\" style=\"list-style-type: none;\">\n<ul type=\"disc\">\n<li>Oversee RBAM projects, schedules, milestones, and team execution&nbsp;</li>\n<li>Facilitate meetings and brief leadership on status, risks, priorities, and progress&nbsp;</li>\n<li data-ogsc=\"rgb(0, 0, 0)\"><span role=\"presentation\">Lead and coordinate vulnerability management activities across enterprise systems, including vulnerability identification, prioritization, remediation tracking, and validation</span></li>\n<li data-ogsc=\"rgb(0, 0, 0)\"><span role=\"presentation\">Oversee remediation efforts by working with system owners, engineers, administrators, database teams, and other stakeholders to ensure timely and risk-informed mitigation</span></li>\n<li data-ogsc=\"rgb(0, 0, 0)\"><span role=\"presentation\">Apply knowledge of CVE, CVSS, NVD, and the CISA KEV catalog to support risk-based vulnerability prioritization and remediation sequencing</span></li>\n<li data-ogsc=\"rgb(0, 0, 0)\"><span role=\"presentation\">Establish, manage, and enforce configuration baselines across Windows, Linux, network, cloud, containerized, and database environments</span></li>\n<li data-ogsc=\"rgb(0, 0, 0)\"><span role=\"presentation\">Incorporate security configuration baselines into configuration management processes, including operating system image hardening, automation, audit, and compliance validation</span></li>\n<li data-ogsc=\"rgb(0, 0, 0)\"><span role=\"presentation\">Support configuration management practices aligned with NIST SP 800-128 and other applicable federal guidance</span></li>\n<li data-ogsc=\"rgb(0, 0, 0)\"><span role=\"presentation\">Coordinate database hardening activities across relational, NoSQL, and cloud-native database environments</span></li>\n<li data-ogsc=\"rgb(0, 0, 0)\"><span role=\"presentation\">Apply DISA STIGs, CIS Benchmarks, and hardening best practices to support secure database configuration and compliance</span></li>\n<li data-ogsc=\"rgb(0, 0, 0)\"><span role=\"presentation\">Assess on-premises and cloud-hosted database environments for security posture, hardening compliance, logging, encryption, data masking, and audit readiness.</span></li>\n<li data-ogsc=\"rgb(0, 0, 0)\"><span role=\"presentation\">Use scanning and validation tools to verify database hardening compliance and identify configuration gaps</span></li>\n<li data-ogsc=\"rgb(0, 0, 0)\"><span role=\"presentation\">Translate audit requirements into actionable technical configurations, remediation tasks, dashboards, reports, and evidence artifacts</span></li>\n<li data-ogsc=\"rgb(0, 0, 0)\"><span role=\"presentation\">Develop, modify, and maintain dashboards and reports in Splunk or similar SIEM platforms to support leadership visibility, operational tracking, and program performance.</span></li>\n<li data-ogsc=\"rgb(0, 0, 0)\"><span role=\"presentation\">Use enterprise ticketing systems such as ServiceNow to document findings, assign remediation actions, track progress, and support auditability</span></li>\n<li data-ogsc=\"rgb(0, 0, 0)\"><span role=\"presentation\">Support automation through scripting, Splunk searches, and repeatable workflows using tools such as Python, PowerShell, Bash, or similar technologies</span></li>\n<li data-ogsc=\"rgb(0, 0, 0)\"><span role=\"presentation\">Support DevSecOps and CI/CD pipeline activities by helping integrate vulnerability management, configuration validation, and hardening requirements into development and deployment processes.</span></li>\n<li data-ogsc=\"rgb(0, 0, 0)\"><span role=\"presentation\">Coordinate with technical teams to ensure remediation, configuration, and database security activities are properly documented and supported by evidence</span></li>\n<li data-ogsc=\"rgb(0, 0, 0)\"><span role=\"presentation\">Provide technical guidance to stakeholders on remediation priorities, configuration risk, database hardening, and cyber hygiene improvement.</span></li>\n<li data-ogsc=\"rgb(0, 0, 0)\"><span role=\"presentation\">Support recurring reporting on vulnerability trends, remediation progress, configuration compliance, database hardening status, operational gaps, and risk reduction.</span></li>\n<li data-ogsc=\"rgb(0, 0, 0)\"><span role=\"presentation\">Help mature the risk-based asset management program by improving processes, automation, reporting, evidence generation, and stakeholder coordination</span></li>\n<li>Direct and support enterprise vulnerability scanning, analysis, remediation prioritization, and reporting&nbsp;</li>\n<li>Guide the development and enforcement of secure configuration baselines across systems and platforms</li>\n<li>Coordinate database hardening, patching, scanning, and compliance activities with stakeholders&nbsp;</li>\n<li>Review cyber hygiene findings and translate results into actionable remediation plans&nbsp;</li>\n<li>Support evaluation of new technologies and products through security review and software approval processes&nbsp;</li>\n<li>Develop or enhance dashboards, reporting, and metrics to improve visibility into risk and remediation progress&nbsp;</li>\n<li>Support process improvement, automation, and operational maturity efforts across the RBAM function&nbsp;</li>\n<li>Ensure work products, reporting, and technical activities align with DHS, client, and federal cybersecurity expectations&nbsp;</li>\n<li>Lead and coordinate vulnerability management, configuration management, and database hardening activities&nbsp;</li>\n\n\n</ul></li>"
    },
    {
      "text": "Job Qualifications  ",
      "content": "<div>\n<ul type=\"disc\">\n<li>Bachelor’s degree in Information Technology, Information Systems, Computer Science, Computer Engineering, Electrical Engineering, or related technical field; or equivalent additional experience&nbsp;</li>\n<li>7+ years of total professional experience&nbsp;</li>\n<li>5+ years of technical experience in vulnerability management, configuration management, database hardening, or related security operations&nbsp;</li>\n<li>Experience leading technical teams or workstreams in dynamic environments&nbsp;</li>\n<li>Strong experience managing vulnerability remediation efforts across enterprise environments&nbsp;</li>\n<li>Experience using vulnerability scanning tools such as Tenable/Nessus&nbsp;</li>\n<li>Strong experience establishing, maintaining, and enforcing configuration baselines&nbsp;</li>\n<li>Familiarity with remediation practices across Windows, Linux, network devices, containers, and cloud platforms&nbsp;</li>\n<li>Strong knowledge of CVE, CVSS, NVD, and the CISA KEV catalog&nbsp;</li>\n<li>Strong knowledge of configuration management principles and secure baseline enforcement&nbsp;</li>\n<li>Familiarity with DISA STIGs, CIS Benchmarks, and secure hardening practices&nbsp;</li>\n<li>Experience with enterprise dashboards, reporting, and ticketing workflows&nbsp;</li>\n<li>Experience with scripting and automation using tools such as Python, PowerShell, Bash, or similar&nbsp;</li>\n<li>Experience with a wide range of database technologies including:&nbsp;</li>\n<ul type=\"circle\">\n<li>Relational databases: Oracle, PostgreSQL, MySQL, MS SQL</li>\n<li>NoSQL Databases: MongoDB</li>\n<li>Cloud-native databases: AmazonRDS, Azure SQL, DynamoDB</li>\n\n<li>Familiarity with DevSecOps and CI/CD pipeline concepts&nbsp;</li>\n<li>Ability to assess and secure on-premises and cloud-hosted database environments&nbsp;</li>\n<li>Experience with audit logging, encryption, masking, and technical evidence generation for compliance needs&nbsp;</li>\n<li>Strong written and verbal communication skills&nbsp;</li>\n\n<p><strong>Required Certifications</strong></p>\n<ul type=\"disc\">\n<li>One active certification such as CASP, GSEC, GSLC, CISSP, CEH, CISM, CISA, or comparable&nbsp;</li>\n<li>One active Agile certification such as PMI-ACP, SAFe Agilist, CSM, or comparable&nbsp;</li>\n\n<br clear=\"all\">\n<p>&nbsp;</p>\n</ul></ul></ul></div>"
    }
  ],
  "country": "US",
  "createdAt": 1776460759784,
  "updatedAt": null,
  "categories": {
    "team": "Security Compliance Team",
    "location": "Washington DC",
    "commitment": "Full-Time",
    "department": "Security Resilience",
    "allLocations": [
      "Washington DC",
      "Baltimore MD",
      "Arlington VA",
      "Columbia, MD",
      "Fort Belvoir, VA",
      "Fort Meade, MD",
      "Herndon, VA",
      "Fredericksburg, VA",
      "Newport News, VA",
      "Northern, VA",
      "Northern VA (Telework Flexibility)",
      "Quantico, VA"
    ]
  },
  "salaryRange": null,
  "workplaceType": "remote"
}