True Zero Technologies

Splunk-based security and tech-management solutions

Vulnerability Management Lead

CybersecurityPosted on Nov 12

Full-timeWashington, DC, USANo salary listedRemote

About the Job

Requirements

Minimum of 6 years of progressive cybersecurity experience, including hands-on vulnerability assessment, security monitoring, remediation coordination, and risk management in complex enterprise environments.
Must possess at least one of the following certifications: GIAC Certified Incident Handler (GCIH), Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or Certified in Risk and Information Systems Control (CRISC).
Demonstrated hands-on experience with Tenable, Aqua Security (AquaSec), and Continuous Diagnostics and Mitigation (CDM) technologies, including vulnerability scanning, security findings analysis, remediation tracking, and integration of vulnerability data across enterprise security platforms.
Strong technical understanding of Windows and Linux operating systems, network protocols, enterprise infrastructure, and security configurations, with the ability to assess vulnerabilities across on-premises, cloud, and containerized environments.
Experience coordinating vulnerability remediation activities with security, compliance, and engineering stakeholders, including familiarity with Plan of Action and Milestones (POA&M) processes, federal cybersecurity requirements, vulnerability reporting, and development of actionable security metrics and dashboards.

Responsibilities

Lead and oversee vulnerability scanning, assessment, prioritization, and remediation tracking across federal enterprise systems, networks, applications, cloud environments, and infrastructure to identify and reduce security risks.
Manage vulnerability remediation workflows, monitor corrective action progress, and coordinate with Plan of Action and Milestones (POA&M) support teams to ensure security findings are accurately documented, prioritized, tracked, and resolved within established timelines.
Partner with Information System Owners (ISOs), Information System Security Officers (ISSOs), compliance personnel, engineering teams, and technical stakeholders to validate vulnerability findings, address security control deficiencies, and coordinate remediation activities.
Lead Cyber Hygiene and Web Application Scanning Program (WASP) activities, coordinating vulnerability assessments, scan scheduling, findings analysis, and remediation efforts to improve enterprise security posture and maintain compliance with applicable federal cybersecurity requirements.
Oversee the implementation, configuration, maintenance, and optimization of enterprise vulnerability management technologies, including Tenable, Aqua Security, and Continuous Diagnostics and Mitigation (CDM) integrations, to support comprehensive security visibility and consistent vulnerability reporting.
Develop and maintain vulnerability management dashboards, key performance indicators (KPIs), remediation metrics, and executive-level reports to monitor vulnerability trends, remediation progress, risk exposure, and overall program effectiveness.
Evaluate vulnerability severity, exploitability, asset criticality, and operational risk to establish remediation priorities, identify recurring security weaknesses, and recommend improvements to vulnerability management processes, policies, and technical controls.

True Zero Technologies, a veteran-owned small business, was founded on the principle that the purposeful enablement of people and technology in an organization directly ties to the quality of its outcomes. True Zero recognizes that those outcomes begin and end with our people, and that is what we have built a community of like-minded, driven, and passionate individuals and innovators who are aligned in a common goal of delivering top-tier services to our customers. Our culture and commitment have been recognized through numerous accolades, including being named one of the Best Places to Work in 2023 in two categories (“Prosperous and Thriving” ($5MM–$50MM in gross revenue) and “Mid-Atlantic Region” (DC, DE, MD, NC, VA, WV)), and again in 2025 as a Best Places to Work honoree. In addition, True Zero earned coveted spots on the Inc. 5000 list of fastest-growing companies in America in 2022, 2023, and 2025, a testament to our sustained growth driven by our people-first approach and unwavering dedication to excellence.

Position Overview

True Zero Technologies is seeking an experienced Vulnerability Management Lead to oversee enterprise vulnerability identification, assessment, remediation tracking, and security risk reduction initiatives within complex federal environments. This leadership position is responsible for coordinating vulnerability management activities across cybersecurity, engineering, and compliance teams, ensuring timely remediation of identified security weaknesses, and supporting federal cybersecurity reporting and compliance requirements.

The ideal candidate will possess extensive hands-on vulnerability management experience, strong technical and analytical capabilities, and expertise in enterprise vulnerability scanning technologies, security compliance frameworks, and federal cybersecurity programs.

Job Responsibilities

Enterprise Vulnerability Management & Assessment: Lead and oversee vulnerability scanning, assessment, prioritization, and remediation tracking across federal enterprise systems, networks, applications, cloud environments, and infrastructure to identify and reduce security risks.

Vulnerability Remediation & POA&M Coordination: Manage vulnerability remediation workflows, monitor corrective action progress, and coordinate with Plan of Action and Milestones (POA&M) support teams to ensure security findings are accurately documented, prioritized, tracked, and resolved within established timelines.

Cross-Functional Security Collaboration: Partner with Information System Owners (ISOs), Information System Security Officers (ISSOs), compliance personnel, engineering teams, and technical stakeholders to validate vulnerability findings, address security control deficiencies, and coordinate remediation activities.

Cyber Hygiene & Web Application Security Programs: Lead Cyber Hygiene and Web Application Scanning Program (WASP) activities, coordinating vulnerability assessments, scan scheduling, findings analysis, and remediation efforts to improve enterprise security posture and maintain compliance with applicable federal cybersecurity requirements.

Vulnerability Management Tools & Integration: Oversee the implementation, configuration, maintenance, and optimization of enterprise vulnerability management technologies, including Tenable, Aqua Security, and Continuous Diagnostics and Mitigation (CDM) integrations, to support comprehensive security visibility and consistent vulnerability reporting.

Security Metrics, Dashboards & Reporting: Develop and maintain vulnerability management dashboards, key performance indicators (KPIs), remediation metrics, and executive-level reports to monitor vulnerability trends, remediation progress, risk exposure, and overall program effectiveness.

Risk Prioritization & Continuous Improvement: Evaluate vulnerability severity, exploitability, asset criticality, and operational risk to establish remediation priorities, identify recurring security weaknesses, and recommend improvements to vulnerability management processes, policies, and technical controls.

Job Requirements

Cybersecurity & Vulnerability Management Experience: Minimum of 6 years of progressive cybersecurity experience, including hands-on vulnerability assessment, security monitoring, remediation coordination, and risk management responsibilities within complex enterprise environments.

Professional Certifications: Must possess at least one of the following certifications: GIAC Certified Incident Handler (GCIH), Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or Certified in Risk and Information Systems Control (CRISC).

Vulnerability Management Technologies & Integration: Demonstrated hands-on experience with Tenable, Aqua Security (AquaSec), and Continuous Diagnostics and Mitigation (CDM) technologies, including vulnerability scanning, security findings analysis, remediation tracking, and integration of vulnerability data across enterprise security platforms.

Operating Systems, Networking & Security Infrastructure: Strong technical understanding of Windows and Linux operating systems, network protocols, enterprise infrastructure, and security configurations, with the ability to assess vulnerabilities across on-premises, cloud, and containerized environments.

Federal Compliance, Reporting & Stakeholder Coordination: Experience coordinating vulnerability remediation activities with security, compliance, and engineering stakeholders, including familiarity with POA&M processes, federal cybersecurity requirements, vulnerability reporting, and the development of actionable security metrics and dashboards.

About the Company

True Zero Technologies

Splunk-based security and tech-management solutions

True Zero Technologies delivers Splunk-based security and technology-management solutions for clients across financial services, healthcare, retail, manufacturing, and government. Its services include professional and managed offerings that guide customers through success journeys, with pre-sales support, cloud and SaaS model development, and cybersecurity and technology management. The solutions work by deploying and configuring Splunk analytics and monitoring to detect threats, manage data, and optimize IT operations, using repeatable, scalable approaches built by experienced specialists. The company emphasizes veteran ownership, wide sector reach, focus on customer success, and diverse partnerships, aiming to provide reliable outcomes while supporting veterans through scholarship programs.

Company size: 11-50
Company stage: Not listed
Total funding: Not listed
Headquarters: Fair Oaks, Virginia
Founded: 2016

Recently Posted Jobs

Explore more opportunities at True Zero Technologies

See more jobs