Vulnerability Management Engineering Lead
G2IT
Vulnerability Management Engineering Lead
G2IT
Integrates secure technology for federal agencies
Location: Quantico, VA (Onsite – Russell-Knox Building)
Company: G2IT
Security Clearance: Active Top Secret with SCI Eligibility (TS/SCI)
G2IT is seeking an experienced Vulnerability Management Engineering Lead to join our cybersecurity team supporting a critical Department of Defense (DoD) mission in Quantico, VA.
This is an excellent opportunity for a cybersecurity professional who enjoys solving complex security challenges, strengthening enterprise defenses, and protecting mission-critical government networks.
In this role, you will lead vulnerability analysis, patch management, security compliance, and remediation efforts across thousands of endpoints operating in highly secure environments, including NIPRNet, SIPRNet, and JWICS.
You will work with cybersecurity engineers, system administrators, and security leadership to identify vulnerabilities, prioritize remediation, improve security processes, and maintain compliance with DoD cybersecurity standards.
If you have hands-on experience with ACAS, Nessus, DISA STIGs, MECM/SCCM, and eMASS, we encourage you to apply!
Lead Vulnerability Management: Analyze ACAS/Nessus scan results to identify, assess, and prioritize security vulnerabilities across enterprise systems.
Drive Security Remediation: Develop and coordinate remediation plans for CAT I, II, and III vulnerabilities, ensuring compliance with DoD requirements and established deadlines.
Manage Patch Deployment: Engineer, test, and deploy operating system and third-party security patches using MECM/SCCM and Microsoft Intune.
Improve Security Compliance: Evaluate systems against DISA STIGs using STIG Viewer, SCAP Compliance Checker, and other security assessment tools.
Support Risk Management: Maintain Plans of Action and Milestones (POA&Ms) in eMASS, documenting security risks, mitigation strategies, and remediation progress.
Troubleshoot Security Issues: Investigate patch failures, non-compliant endpoints, and recurring vulnerabilities to identify root causes and implement solutions.
Develop Security Reports: Produce vulnerability assessments, STIG compliance reports, and cybersecurity metrics for leadership and government stakeholders.
Collaborate Across Teams: Work closely with ISSOs, system administrators, and cybersecurity personnel to coordinate remediation and maintain security standards.
Enhance Security Processes: Identify opportunities to automate vulnerability management, improve patch deployment, and reduce remediation timelines.
U.S. Citizenship is required.
Active Top Secret clearance with SCI eligibility and a favorably adjudicated Tier 5/Tier 5 Reinvestigation (T5/T5R), with investigation currency or Continuous Evaluation/Vetting eligibility.
Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field, plus at least 4 years of relevant experience. An additional 4 years of relevant experience may substitute for the degree.
Minimum 4 years of experience in cybersecurity, vulnerability management, security compliance, or RMF continuous monitoring within DoD or federal environments.
Current DoD 8570/8140 IAT Level II certification, such as Security+ CE, CySA+, GSEC, SSCP, or another qualifying certification.
Hands-on experience with ACAS/Nessus vulnerability scanning and analysis.
Experience using DISA STIG Viewer and SCAP Compliance Checker to assess system security.
Familiarity with MECM/SCCM, patch management, and enterprise endpoint security.
Experience maintaining POA&Ms, security documentation, and compliance evidence in eMASS.
Knowledge of NIST SP 800-53, Risk Management Framework (RMF), DISA STIGs, and DoD cybersecurity requirements.
Understanding of Windows and Linux operating systems, Active Directory, networking, and endpoint management.
Strong troubleshooting, analytical, documentation, and communication skills.
Ability to work independently and effectively collaborate with technical and cybersecurity teams.
Experience supporting DoD, Department of War, or Intelligence Community networks.
Experience working across classified and unclassified environments, including NIPRNet, SIPRNet, and JWICS.
Knowledge of Microsoft Intune, HBSS/ESS, and enterprise security monitoring tools.
Familiarity with USCYBERCOM/JFHQ-DODIN directives and IAVM compliance requirements.
Experience creating cybersecurity dashboards and reports using Power BI.
Experience with ServiceNow or similar IT Service Management (ITSM) platforms.
Experience improving vulnerability management workflows through automation.
At G2IT, you will have the opportunity to apply your cybersecurity expertise to a meaningful national defense mission while working alongside experienced IT and security professionals.
This position offers the chance to take ownership of enterprise vulnerability management initiatives, contribute to security improvements, and help protect critical government information systems.
Annual Salary: $100,000–$130,000, depending on experience and qualifications.
G2IT integrates and manages technology for U.S. federal agencies and national-security organizations. Its engineers combine cloud migration, secure software development and cyber defense with service-management systems that handle users' technical requests. The firm connects commercial enterprise platforms from vendors such as BMC and ServiceNow, designing architectures and automating deployment and compliance checks for sensitive networks. Customers buy technology products and contracted professional services, with ongoing support for data centers, cloud environments and workplace systems. Founded in 2014, G2IT is headquartered in Annapolis, Maryland.
Explore more opportunities at G2IT