Remote Jobs RockRemote Jobs Rock

Vulnerability Management Lead (R-00254)

🕒 4 days ago
Vulnerability ManagementVulnerability ScanningVulnerability AssessmentRemediation Tracking
Apply Now

📜 Description

  • Lead vulnerability scanning, assessment, prioritization, and remediation tracking across enterprise systems, networks, applications, cloud environments, and infrastructure.
  • Manage remediation workflows and coordinate POA&M documentation, prioritization, progress tracking, and resolution.
  • Partner with system owners, security officers, compliance personnel, and engineering teams to validate findings and coordinate remediation.
  • Lead Cyber Hygiene and Web Application Scanning Program activities, including scan scheduling, findings analysis, and remediation.
  • Oversee vulnerability management tools and integrations, including Tenable, Aqua Security, and CDM.
  • Develop dashboards, KPIs, remediation metrics, and reports; assess risk and recommend program improvements.

🛠️ Requirements

  • Minimum of 6 years of progressive cybersecurity experience, including hands-on vulnerability assessment, security monitoring, remediation coordination, and risk management.
  • At least one certification: GCIH, CISSP, CISM, or CRISC.
  • Hands-on experience with Tenable, Aqua Security, and CDM, including scanning, findings analysis, remediation tracking, and platform integrations.
  • Strong understanding of Windows and Linux, network protocols, enterprise infrastructure, and security configurations across on-premises, cloud, and containerized environments.
  • Experience coordinating remediation with security, compliance, and engineering stakeholders; familiarity with POA&M processes, federal cybersecurity requirements, reporting, and security metrics.
Full job description
True Zero Technologies, a veteran-owned small business, was founded on the principle that the purposeful enablement of people and technology in an organization directly ties to the quality of its outcomes. True Zero recognizes that those outcomes begin and end with our people, and that is what we have built a community of like-minded, driven, and passionate individuals and innovators who are aligned in a common goal of delivering top-tier services to our customers. Our culture and commitment have been recognized through numerous accolades, including being named one of the Best Places to Work in 2023 in two categories (“Prosperous and Thriving” ($5MM–$50MM in gross revenue) and “Mid-Atlantic Region” (DC, DE, MD, NC, VA, WV)), and again in 2025 as a Best Places to Work honoree. In addition, True Zero earned coveted spots on the Inc. 5000 list of fastest-growing companies in America in 2022, 2023, and 2025, a testament to our sustained growth driven by our people-first approach and unwavering dedication to excellence.

Position Overview

True Zero Technologies is seeking an experienced Vulnerability Management Lead to oversee enterprise vulnerability identification, assessment, remediation tracking, and security risk reduction initiatives within complex federal environments. This leadership position is responsible for coordinating vulnerability management activities across cybersecurity, engineering, and compliance teams, ensuring timely remediation of identified security weaknesses, and supporting federal cybersecurity reporting and compliance requirements.

The ideal candidate will possess extensive hands-on vulnerability management experience, strong technical and analytical capabilities, and expertise in enterprise vulnerability scanning technologies, security compliance frameworks, and federal cybersecurity programs.

Job Responsibilities

Job Responsibilities

  • Enterprise Vulnerability Management & Assessment: Lead and oversee vulnerability scanning, assessment, prioritization, and remediation tracking across federal enterprise systems, networks, applications, cloud environments, and infrastructure to identify and reduce security risks.
  • Vulnerability Remediation & POA&M Coordination: Manage vulnerability remediation workflows, monitor corrective action progress, and coordinate with Plan of Action and Milestones (POA&M) support teams to ensure security findings are accurately documented, prioritized, tracked, and resolved within established timelines.
  • Cross-Functional Security Collaboration: Partner with Information System Owners (ISOs), Information System Security Officers (ISSOs), compliance personnel, engineering teams, and technical stakeholders to validate vulnerability findings, address security control deficiencies, and coordinate remediation activities.
  • Cyber Hygiene & Web Application Security Programs: Lead Cyber Hygiene and Web Application Scanning Program (WASP) activities, coordinating vulnerability assessments, scan scheduling, findings analysis, and remediation efforts to improve enterprise security posture and maintain compliance with applicable federal cybersecurity requirements.
  • Vulnerability Management Tools & Integration: Oversee the implementation, configuration, maintenance, and optimization of enterprise vulnerability management technologies, including Tenable, Aqua Security, and Continuous Diagnostics and Mitigation (CDM) integrations, to support comprehensive security visibility and consistent vulnerability reporting.
  • Security Metrics, Dashboards & Reporting: Develop and maintain vulnerability management dashboards, key performance indicators (KPIs), remediation metrics, and executive-level reports to monitor vulnerability trends, remediation progress, risk exposure, and overall program effectiveness.
  • Risk Prioritization & Continuous Improvement: Evaluate vulnerability severity, exploitability, asset criticality, and operational risk to establish remediation priorities, identify recurring security weaknesses, and recommend improvements to vulnerability management processes, policies, and technical controls.
  • Job Requirements

    Job Requirements

  • Cybersecurity & Vulnerability Management Experience: Minimum of 6 years of progressive cybersecurity experience, including hands-on vulnerability assessment, security monitoring, remediation coordination, and risk management responsibilities within complex enterprise environments.
  • Professional Certifications: Must possess at least one of the following certifications: GIAC Certified Incident Handler (GCIH), Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or Certified in Risk and Information Systems Control (CRISC).
  • Vulnerability Management Technologies & Integration: Demonstrated hands-on experience with Tenable, Aqua Security (AquaSec), and Continuous Diagnostics and Mitigation (CDM) technologies, including vulnerability scanning, security findings analysis, remediation tracking, and integration of vulnerability data across enterprise security platforms.
  • Operating Systems, Networking & Security Infrastructure: Strong technical understanding of Windows and Linux operating systems, network protocols, enterprise infrastructure, and security configurations, with the ability to assess vulnerabilities across on-premises, cloud, and containerized environments.
  • Federal Compliance, Reporting & Stakeholder Coordination: Experience coordinating vulnerability remediation activities with security, compliance, and engineering stakeholders, including familiarity with POA&M processes, federal cybersecurity requirements, vulnerability reporting, and the development of actionable security metrics and dashboards.
  • Cybcube

    Cyber Threat Intelligence Lead

    📅 Sep 10
    Cybcube🏢 Insurance And Risk Analytics🤝 B2B

    Lead cyber threat intelligence and technology-risk analysis, translating threat behavior, security practices, and emerging AI risks into defensible scenarios and assumptions for cyber catastrophe models.

    Cyber Threat IntelligenceOffensive CybersecurityDefensive CybersecurityCyber Risk Modeling
    Recorded Future

    Senior Network Intelligence Analyst

    🕒 3 days ago
    Recorded Future👥 1001 - 5000 employees🏢 Computer & Network Security

    Analyze large-scale network telemetry and adversary infrastructure to identify malicious activity, produce intelligence assessments, and inform government and public-sector operational decisions.

    Network Telemetry AnalysisNetflowIP NetworkingRouting
    Truezerotech

    Cyber Hunt Senior Analyst (R-00255)

    🕒 4 days ago
    Truezerotech👥 51 - 200 employees🏢 Information Technology And Services

    Lead proactive threat hunting and cyber threat intelligence across complex federal environments, developing detection strategies, guiding investigations, and strengthening enterprise defenses against advanced threats.

    CybersecurityCyber Threat IntelligenceThreat HuntingBehavioral Analytics
    Truezerotech

    Cyber Hunt Team Leader (R-00256)

    🕒 4 days ago
    Truezerotech👥 51 - 200 employees🏢 Information Technology And Services

    Lead proactive threat hunting across complex federal environments, directing investigations, developing advanced detection methods, analyzing adversary behavior, and coordinating with security and government teams to mitigate threats.

    Threat HuntingThreat Detection EngineeringIncident InvestigationEDR
    Cybcube

    Security Research Engineer, Risk Signals

    🕒 3 days ago
    Cybcube🏢 Insurance And Risk Analytics🤝 B2B

    Research internet-facing assets and network configurations to develop quantitative cyber risk signals, translating security threats and network architecture into measurable inputs for production risk models.

    Internet ArchitectureNetwork EngineeringTCP/IPBGP

    Trusted by Remote Workers