Vulnerability Manager

Booz Allen Hamilton

. Lead ACAS modernization efforts, transitioning Tenable deployments from basic scanning to enterprise vulnerability management services .

Posted 11/5/2026full-timeUnited StatesJunior💰 $99,000 - $225,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in leading vulnerability management initiatives, including ACAS modernization and STIG compliance solutions, while effectively advising stakeholders on risk management frameworks and automation strategies. Proficient in integrating cybersecurity outputs with enterprise processes and mentoring junior staff to enhance team capabilities.

Highest-signal resume keywords

ACAS ExperienceSTIG Compliance SolutionsInfrastructure As Code (IaC)RMF KnowledgeActive TS/SCI Clearance

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Vulnerability ManagementAutomation ScriptingData VisualizationRelational DatabasesCybersecurity Risk AssessmentContinuous MonitoringCredentialed CoverageAsset TaggingRemediation TrackingRisk Acceptance

Soft Skills

MentoringStakeholder AdvisingCollaboration

Tools & Technologies

Tenable.scNessusServiceNowXactaEMASSPythonPowerShellTableauPower BIAWS GovCloud

Certifications & Qualifications

DoD 8570 IAT Level III CertificationSecurityX/CASP+CCNP SecurityCISACISSPGCEDGCIHCCSPCEHCySA+

Industry Keywords

DoD Cybersecurity ProgramsNIST 800-53POA&M ManagementZero Trust ModernizationCyber Risk Posture

Tech Stack

Tools & technologies

AnsibleAWSAzureCloudCyber SecurityPythonServiceNowSQLTableauTypeScript

About the role

Key responsibilities & impact

Lead ACAS modernization efforts, transitioning Tenable deployments from basic scanning to enterprise vulnerability management services
Standardize scan policies, credentialed coverage, asset tagging, and data hygiene
Design contractor-operated workflows for vulnerability intake, prioritization, remediation tracking, and risk acceptance
Integrate ACAS outputs into customer POA&M processes, ATO sustainment activities, and reporting requirements
Advise government stakeholders on vulnerability prioritization, risk tradeoffs, and RMF integration
Partner with cyber engineering, architecture, and RMF teams to align vulnerability management with Zero Trust modernization initiatives
Produce executive-level briefings on cyber risk posture, trends, and remediation effectiveness
Develop enterprise STIG compliance frameworks supporting control inheritance, reuse, and automation
Standardize STIG baselines, tailoring decisions, and documentation
Implement and maintain SCAP or STIG tooling such as SCC, OpenSCAP, and vendor solutions across server, endpoint, and platform technologies
Produce STIG artifacts and evidence packages supporting ATOs and continuous monitoring
Advise system owners and ISSMs on remediation strategies and risk-based deviations
Automate repeatable tasks using scripting and workflow tooling
Integrate ACAS and STIG outputs with customer ticketing, GRC, or reporting systems
Mentor junior staff and support contract deliverables, metrics, and reporting requirements

Requirements

What you’ll need

4+ years of experience leading automation projects using Infrastructure as Code (IaC)
3+ years of experience supporting DoD or IC customer cybersecurity programs
Experience with ACAS, including Tenable.sc or Nessus, in enterprise environments
Experience designing enterprise STIG compliance solutions
Knowledge of RMF, NIST 800-53, POA&M management, and continuous monitoring
Active TS/SCI clearance; willingness to take a polygraph exam
Associate’s degree and 5+ years of experience supporting IT projects and activities, Bachelor’s degree and 3+ years of experience supporting IT projects and activities, or Master’s degree and 1+ years of experience supporting IT projects and activities
Ability to obtain a DoD 8570 IAT Level III Certification such as SecurityX/CASP+, CCNP Security, CISA, CISSP or Associate, GCED, GCIH, or CCSP Certification within 60 days of start date
Ability to obtain a DoD 8570.01-M Cybersecurity Service Provider - Infrastructure Support Certification such as CEH, CySA+, GICSP, SSCP, CHFI, CFR, Cloud+, or CND Certification within 30 days of start date
Experience supporting large multi-program or enterprise-level DoD contracts
Experience with ServiceNow, Xacta, eMASS, or similar GRC or ATO tooling
Experience with scripting or automation using tools such as Python and PowerShell
Experience with relational databases, such as SQL
Experience with data visualization tools, such as tableau or Power BI
Experience in cloud or hybrid DoD environments such as AWS GovCloud and Azure Government
Ability to mentor junior staff, contribute to internal IP, ansible playbooks, and reusable artifacts, and support contract deliverables, metrics, and reporting requirements
TS/SCI clearance is required
Must complete identity verification and be on camera during interviews and assessments
AI assistance during interviews is prohibited unless permission is explicitly provided

Benefits

Comp & perks

Health benefits
Life insurance
Disability benefits
Financial benefits
Retirement benefits
Paid leave
Professional development
Tuition assistance
Work-life programs
Dependent care
Recognition awards program
Identity verification and fraud protection process