Vulnerability Assessment Team Lead

The Role

What Success Looks Like

• Findings get prioritized by real exploitability and impact to this environment, not just a generic severity score.
• You can tell the difference between a finding that is theoretical and one that is genuinely reachable, and you communicate that difference.
• Assessment coverage reaches the systems that matter most, not just the ones that are easiest to scan.

• Findings that get flagged as critical get fixed, and you can show the trend closing over time.
• Engineering teams bring you into the fix, not just the finding, when the remediation is not obvious.
• Recurring finding types get traced to a build standard or process gap and closed at the source.

• What is reported as open, in progress, or accepted matches reality at any given time.
• Accepted risk decisions are documented with a real justification, not left as findings that quietly stopped getting tracked.
• Leadership gets an accurate picture of the environment's exposure, including what has not been assessed yet.

• New systems and changes get assessed before they go live, not discovered later in a routine scan.
• Assessment methodology improves based on what real findings turned out to matter, rather than staying static.
• You can name where assessment coverage is thin and what it would take to close that gap.

What You Bring

• One of the following certifications: CISM or CISSP
• Minimum of five (5) years’ experience performing vulnerability assessments for an enterprise network, this includes endpoints, network devices, IOT devices, web applications, databases or wireless access points.
• Analyzing vulnerabilities and providing assessments and remediation instructions; knowledgeable to maintain a repository of VA application issues and report application issues to USG Government customers.
• Experience with applying Information Systems Security principles and methods.
• Experience with Application Security implementation; understanding of Firewall Management and Advanced Threat Protection; familiarity with Access Control, Authorization, Intrusion Prevention and Intrusion Detection.
• Familiar with FISMA compliance and Risk Management Framework.B
• Bachelor’s Degree computer science, engineering, cybersecurity or STEM.

• You have led vulnerability assessment or penetration testing work that produced findings engineering teams actually acted on.
• You have prioritized findings by real exploitability rather than by scanner severity score alone, and can describe how.
• You have worked in a federal or highly regulated environment and know what that adds to remediation timelines and risk acceptance processes.
• You have gotten a team to fix something that had not caused a visible problem yet, and can describe how you made the case.
• You hold an active CBP BI, a fitness determination at another DHS component, or an active DoD clearance. Any of these shortens your start date.
• Certifications such as OSCP, GPEN, or equivalent are useful, but they are not a substitute for having driven real remediation.
• Any of the foloowing certifications for VAT Analysts: GPEN, GWAPT, GSNA, GAWN, GWEB, GXPN, CEH, OSCP, OSEE, OSCE, OSWP.
• Leadership experience of a technical team.

A note on timing

Employee Benefits

• Happy - Be Infectious. Happiness multiplies and creates a positive and connected environment where motivation and satisfaction have an outsized effect on everything we do.
• Helpful - Be Supportive. Being helpful is the foundation of teamwork, resulting in a supportive atmosphere where collaboration flourishes, and collective success is celebrated.
• Honest - Be Trustworthy. Honesty serves as our compass, ensuring transparent communication and ethical conduct, essential to who we are and the complex domains we support.
• Humble - Be Grounded. Success is not achieved alone, humility ensures a culture of mutual respect, encouraging open communication, and a willingness to learn from one another and take on any task.
• Hungry - Be Eager. Our hunger for excellence drives an insatiable appetite for innovation and continuous improvement, propelling us forward in the face of new and unprecedented challenges.
• Hustle - Be Driven. Hustle is reflected in our relentless work ethic, where we are each committed to going above and beyond to advance the mission and achieve success.