Job Description

Job Description

JOB SUMMARY

\n

ONLY CANDIDATES LOCAL TO VIRGINIA, WEST VIRGINIA, WASHINGTON-DC & MARYLAND SHALL BE CONTACTED

\n

The Vulnerability Management Specialist Contractor is responsible for supporting enterprise vulnerability management program through the identification, assessment, prioritization, reporting, and remediation of cybersecurity vulnerabilities across corporate IT, cloud, and digital environments.

\n

This role will work closely with project teams, infrastructure teams, application owners, cybersecurity personnel, and third-party service providers to ensure vulnerabilities are addressed in a timely and risk-informed manner. The position requires strong technical expertise, collaboration skills, and the ability to influence remediation activities without direct authority.

\n

The successful candidate will have hands-on experience with vulnerability assessment technologies, Breach and Attack Simulation (BAS) platforms, Microsoft cloud security technologies, ServiceNow workflows, and enterprise remediation programs. The individual must be capable of translating technical findings into actionable business outcomes while maintaining alignment with cybersecurity standards, regulatory obligations, and project delivery timelines.

\n

\n

QUALIFICATIONS, SKILLS & ABILITIES

\n

Technical Attributes

\n

Required Experience

\n

• 7+ years of cyber security, vulnerability management, or security operations experience.

\n

• Demonstrated experience managing enterprise vulnerability remediation programs.

\n

• Hands-on experience with Qualys Vulnerability Management .

\n

• Experience with Breach and Attack Simulation (BAS) technologies.

\n

• Experience with Microsoft security technologies , including:

\n

• Microsoft Defender

\n

• Microsoft Cloud Security Posture Management (CSPM)

\n

• Azure

\n

• Azure DevOps (ADO)

\n

• Experience with ServiceNow workflow management and reporting.

\n

• Experience supporting cloud security and vulnerability management initiatives.

\n

• Experience working within large enterprise environments with diverse technology ecosystems.

\n

• Strong understanding of vulnerability prioritization methodologies and risk-based remediation approaches.

\n

• Knowledge of cybersecurity frameworks and industry best practices, including NIST.

\n

Preferred Experience

\n

• Experience supporting utility, critical infrastructure, energy, or industrial organizations.

\n

• Experience leveraging threat intelligence to prioritize remediation activities.

\n

• Experience supporting security assessments, penetration testing, and audit remediation programs.

\n

• Familiarity with security operations, incident response, and defensive security technologies.

\n

Personal Attributes

\n

• Strong relationship-building and stakeholder engagement skills.

\n

• Ability to work collaboratively with business, technical, and third-party teams.

\n

• Capable of influencing and driving remediation activities without direct authority.

\n

• Strong analytical and problem-solving abilities.

\n

• Excellent verbal, written, and presentation skills.

\n

• Ability to communicate technical security issues in business-friendly language.

\n

• Strong organizational skills with the ability to manage multiple priorities simultaneously.

\n

• Highly self-motivated with strong attention to detail.

\n

• Team-oriented and committed to supporting enterprise objectives while maintaining security requirements.

\n

EDUCATION

\n

Bachelor's degree in Computer Science, Information Technology, Cyber Security, Engineering, or a related field preferred.

\n

Equivalent combination of education and relevant professional experience will be considered.

\n

\n

WORK EXPERIENCE

\n

• Minimum 7 years of experience in Cyber Security, Vulnerability Management, Security Operations, Infrastructure Security, or a related discipline.

\n

• Demonstrated experience working with project delivery teams and enterprise technology stakeholders.

\n

• Experience producing executive-level metrics, dashboards, and program reporting.

\n

CERTIFICATIONS (Preferred)

\n

One or more of the following:

\n

• CISSP

\n

• GIAC Vulnerability Management (if held)

\n

• GIAC Security Essentials (GSEC)

\n

• GIAC Continuous Monitoring Certification (GMON)

\n

• Certified Information Security Manager (CISM)

\n

• Microsoft Security Certifications

\n

• Microsoft Azure Security Engineer Associate (AZ-500)

\n

• Qualys Certified Specialist certifications

\n

Desired Candidate Profile

\n

The ideal candidate is a hands-on vulnerability management practitioner who can bridge the gap between cybersecurity requirements and project delivery. They are comfortable engaging with technical teams, project managers, vendors, and leaders to drive remediation efforts, improve security posture, provide meaningful reporting, and ensure vulnerabilities are addressed without unnecessarily impacting business objectives.

\n

Job Tags

For contractors, Work experience placement, Local area

Similar Jobs