Vulnerability Management Lead

Category: Cyber Security

Main location: United States, Tennessee, Knoxville

Position ID:J0826-0982

Employment Type: Full Time

Position Description:

Own the enterprise vulnerability program-continuous scanning, CISA KEV tracking, prioritization, POA&M remediation, and effectiveness reporting.

***This position is located in our Knoxville, TN office; however, a hybrid working model is acceptable***

Your future duties and responsibilities:

. Operate scanners (e.g., Tenable) and coordinate authenticated, comprehensive coverage.
. Analyze findings, validate exploitability; prioritize and track remediation SLAs and POA&Ms.
. Monitor CISA KEV and VDP intake; report risk and remediation metrics; drive measurable reduction.

Required qualifications to be successful in this role:

. 7-10+ years in vulnerability management/penetration testing; remediation strategies and stakeholder engagement.
. Experience with enterprise scanning, risk scoring, and KEV/VDP processes.
. Security clearance: Ability to obtain/maintain a Public Trust (or higher per client).
. US Citizenship or Green Card Holder required.

Education & Certifications

. Bachelor's; CEH/GPEN or similar certifications a plus.

CGI is required by law in some jurisdictions to include a reasonable estimate of the compensation range for this role. The determination of this range includes various factors not limited to skill set, level, experience, relevant training, and licensure and certifications. To support the ability to reward for merit based performance, CGI typically does not hire individuals at or near the top of the range for their role. Compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range for this role in the U.S. is $63,700.00 $176,300.00.

CGI Federal's benefits are offered to eligible professionals on their first day of employment to include:
. Competitive compensation
. Comprehensive insurance options
. Matching contributions through the 401(k) plan and the share purchase plan
. Paid time off for vacation, holidays, and sick time
. Paid parental leave
. Learning opportunities and tuition assistance
. Wellness and Well being programs

#CGIFederalJob

Skills:

• Operational Security
• Security Analysis
• Vulnerability management(IAVM)
• Security Architecture
• Threat Risk Assessment