Security LEAD (Vulnerability Management)

InstantServe LLC

$90K — $130K *
Information Technology
Less than 5 years of experience
Job Overview by Ladders

Qualifications

  • 5-7 years of experience in cybersecurity or risk management
  • In-depth knowledge of vulnerability management processes
  • Familiarity with NIST guidelines and standards
  • Proficient in analyzing vulnerability data and metrics
  • Strong communication skills for stakeholder engagement

Responsibilities

  • Review and organize existing vulnerability data and reports
  • Establish a centralized baseline for vulnerabilities
  • Categorize and prioritize vulnerabilities based on impact and risk level
  • Coordinate remediation efforts across various teams
  • Track and report on remediation progress and timelines
  • Validate remediation efforts and document closure appropriately
  • Identify process improvements to enhance vulnerability management

Benefits

  • Comprehensive health and wellness benefits
  • Professional development opportunities
  • Flexible work arrangements
  • Supportive work environment with a focus on team collaboration
  • Access to industry conferences and technical training
Full Job Description
Job Description

Qualifications

Key Responsibilities

1. Vulnerability Inventory & Baseline Establishment
  • Review existing vulnerability data from scans, assessments, and security tools
  • Establish and maintain a centralized vulnerability baseline
  • Develop and document risk-based remediation timelines, considering vulnerability aging and current risk posture

2. Risk Classification & Prioritization
  • Categorize and prioritize vulnerabilities based on severity, exploitability, risk level, and operational impact
  • Ensure alignment with National Institute of Standards and Technology (NIST) guidelines
  • Validate that remediation timelines align with Agency-defined SLAs for each risk category

3. Remediation Coordination & Communication
  • Coordinate remediation efforts with system, server, and application owners
  • Communicate clear expectations, timelines, and risk context to stakeholders
  • Track remediation progress and identify dependencies, blockers, and delays
  • Escalate critical, high-risk, or overdue vulnerabilities in accordance with Agency governance processes

4. Tracking, Metrics & Reporting
  • Maintain continuous tracking of vulnerability remediation activities
  • Generate regular status reports, including:
    • Vulnerability status (open vs. closed)
    • Aging and risk trends
    • Remediation performance metrics

5. Validation & Closure
  • Validate remediation through scan results and supporting evidence
  • Confirm closure of vulnerabilities within tracking systems
  • Ensure unresolved vulnerabilities are formally documented with approved risk acceptance or exception records, per Agency policy

6. Program Improvement Support
  • Identify process gaps, systemic issues, and control weaknesses
  • Recommend improvements to enhance remediation efficiency, governance, and accountability
  • Ensure alignment with NIST standards and Agency policies


Additional Information

Similar Jobs

More Jobs at InstantServe LLC

More Information Technology Jobs

Find similar Security LEAD (Vulnerability Management) jobs: