Cybersecurity Vulnerability Management Team Lead

Cherokee Federal

. Lead and mature NSF’s vulnerability management capability across enterprise, cloud, containerized, application, and hybrid environments .

Posted 10/30/2026full-timeRemote • United StatesSenior💰 $165,000 - $170,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive expertise in vulnerability management, including the application of CISA KEV, EPSS, and attack path analysis to prioritize vulnerabilities. Proficient in leading teams, developing roadmaps, and integrating security tools to enhance exposure management and remediation efforts.

Highest-signal resume keywords

Vulnerability ManagementTenable.sc ExpertiseServiceNow Vulnerability ResponseThreat Intelligence ApplicationCloud Security Experience

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Vulnerability ManagementExposure ManagementAttack Path AnalysisCredential ManagementAutomation Using APIsPython ProgrammingPowerShell ScriptingContinuous ValidationScan Coverage ImprovementIncident Response Support

Soft Skills

Technical LeadershipCollaborationAccountabilityCommunicationContinuous Improvement

Tools & Technologies

Tenable.ioNessusServiceNowAWS InspectorSecurity HubGuardDutyWizPrisma CloudMicrosoft Defender for CloudAppScan

Certifications & Qualifications

CISSPGCIHCySA+Security+Tenable Certified ProfessionalAWS Security SpecialtyServiceNow Vulnerability Response Certification

Industry Keywords

CybersecurityFederal EnvironmentCloud EnvironmentsContinuous Detection EngineeringExecutive Reporting

Tech Stack

Tools & technologies

AWSAzureCloudCyber SecurityKubernetesPythonServiceNow

About the role

Key responsibilities & impact

Lead and mature NSF’s vulnerability management capability across enterprise, cloud, containerized, application, and hybrid environments
Provide technical leadership to vulnerability analysts and foster accountability, ownership, collaboration, and continuous improvement
Develop and maintain a vulnerability management roadmap aligned with evolving threats and organizational priorities
Apply CISA KEV, EPSS, threat intelligence, asset criticality, internet-facing asset identification, attack path analysis, and MITRE ATT&CK mapping to prioritize exposures
Evaluate emerging technologies that improve vulnerability validation, attack surface visibility, and exposure management
Advance exposure reduction, detection engineering, continuous validation, cloud-native security, and automation
Own discovery, validation, prioritization, remediation coordination, exception handling, verification, and executive reporting
Operate and optimize Tenable.sc, Tenable.io, and Nessus
Improve scan coverage, credential management, accuracy, and false-positive reduction
Integrate findings from AWS Inspector, Security Hub, GuardDuty, Wiz, Prisma Cloud, and Microsoft Defender for Cloud
Partner with Application Security and DevSecOps teams on AppScan, DAST, SAST, CI/CD integrations, and container image scanning
Mature ServiceNow Vulnerability Response through CMDB enrichment, automated ticket creation, SLA tracking, ownership assignment, and escalation workflows
Identify and develop automation opportunities using APIs, Python, PowerShell, and orchestration capabilities
Build executive dashboards covering MTTR, SLA adherence, vulnerability aging, exposure trends, scan coverage, and remediation effectiveness
Brief cybersecurity leadership on emerging risks, remediation progress, and program maturity
Provide technical leadership to a small team of vulnerability analysts
Perform other job-related duties as assigned

Requirements

What you’ll need

8+ years of cybersecurity experience
4+ years of direct vulnerability management experience in a federal or large enterprise environment
3+ years leading vulnerability analysts, remediation programs, or enterprise vulnerability management initiatives
Deep hands-on expertise with Tenable.sc, Tenable.io, and Nessus
Experience implementing or significantly improving a Vulnerability Management or Exposure Management capability
Experience with ServiceNow Vulnerability Response and CMDB integrations
Experience using CISA KEV, EPSS, threat intelligence, asset criticality, and attack path analysis to prioritize vulnerabilities
Experience supporting AWS, Azure, or hybrid cloud environments
Experience working with Security Operations and Incident Response teams to identify and rapidly remediate actively exploited vulnerabilities
Experience briefing technical teams, executives, and federal stakeholders
Prolonged periods of sitting at a desk and working on a computer; may occasionally require standing or moving about the office for extended periods
Must pass pre-employment qualifications of Cherokee Federal
Preferred certifications and experience include SafeBreach, AttackIQ, Pentera, XM Cyber, Wiz, Prisma Cloud, AppScan, BAS, CCV, EASM, Kubernetes security, detection engineering, CISSP, GCIH, CySA+, Security+, Tenable Certified Professional, AWS Security Specialty, and ServiceNow Vulnerability Response Certification

Benefits

Comp & perks

Up to a 6% 401(k) company match
Paid time off
Medical, dental, and vision insurance, plus prescription drug coverage
Basic life and AD&D insurance, with supplemental life options
Short-term and long-term disability coverage
Paid holidays
Employee Assistance Program (EAP)
Flexible Spending Account (FSA) and Health Savings Account (HSA) options
Professional development, training, and certification support
Voluntary accident, critical illness, and identity theft protection