Vulnerability Management Lead – Cybersecurity

General Dynamics Information Technology

. Lead enterprise vulnerability management, RMF/ATO execution, POA&M oversight, KEV remediation, and continuous monitoring across 130+ system boundaries and millions of endpoints .

Posted 10/21/2026full-timeRemote • United StatesSenior💰 $149,500 - $170,144 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive expertise in enterprise cybersecurity and vulnerability management, with a strong focus on RMF/ATO operations, compliance with federal cybersecurity frameworks, and leadership of cross-functional teams. Proven ability to drive modernization initiatives and oversee large-scale federal cybersecurity programs while ensuring adherence to regulatory requirements.

Highest-signal resume keywords

Enterprise Cybersecurity ManagementVulnerability Management ProgramsRMF/ATO OperationsFederal Cybersecurity FrameworksStakeholder Communication

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Vulnerability ManagementRMF/ATO ExecutionContinuous MonitoringCompliance ValidationCybersecurity IntegrationKEV RemediationProgram ManagementAudit ReadinessPerformance ReportingIncident Coordination

Soft Skills

Strategic ThinkingAnalytical SkillsOrganizational SkillsExecutive-Level Communication

Tools & Technologies

NIST SP 800-53NIST SP 800-30NIST SP 800-63NIST SP 800-207Zero TrustPKIICAMCloud SecurityMiddleware/Web SecurityDatabase Security

Certifications & Qualifications

PMPPgMPSAFeCISSPCISMCAPITIL v4

Industry Keywords

FISMACISAOMB Cybersecurity MandatesCommon Control GovernanceVA Cybersecurity ProgramsTIC 3.0Performance-Based ContractsKPI/AQL Management

Tech Stack

Tools & technologies

CloudCyber SecurityPMP

About the role

Key responsibilities & impact

Lead enterprise vulnerability management, RMF/ATO execution, POA&M oversight, KEV remediation, and continuous monitoring across 130+ system boundaries and millions of endpoints
Ensure compliance with FISMA, NIST, CISA directives, OMB memoranda, VA Handbook 6500, and Zero Trust modernization goals
Oversee RMF artifacts, system documentation, inventories, baselines, privacy artifacts, and ATO packages
Direct cybersecurity integration across ICAM, PKI, WebOps, Middleware, Virtualization, Printer Security, Database, and OC/CMOP teams
Lead KEV and aged-vulnerability analysis, stakeholder notifications, trend reporting, and remediation tracking
Produce dashboards, scorecards, posture reports, continuous-monitoring artifacts, and executive-level metrics
Oversee Common Controls governance, evidence collection, control reviews, and compliance validation
Lead coordinated remediation, escalation workflows, RCA processes, and unified cybersecurity situational awareness
Drive modernization across vulnerability management, RMF automation, Zero Trust alignment, cloud security improvements, and enterprise hardening
Support the Department of Veterans Affairs in modernizing and securing enterprise systems supporting millions of Veterans

Requirements

What you’ll need

Bachelor’s degree and 12+ years of experience in enterprise cybersecurity, vulnerability management, RMF/ATO operations, or federal IT program leadership
Experience overseeing large-scale federal cybersecurity programs across multiple technical domains
Deep understanding of federal cybersecurity frameworks
Knowledge of NIST SP 800-53, 800-30, 800-63, and 800-207
Knowledge of FISMA, RMF, and CISA BOD requirements
Knowledge of Zero Trust, TIC 3.0, and OMB cybersecurity mandates
Proven ability to lead cross-functional engineering teams in multi-vendor environments
Experience with enterprise vulnerability management programs, including KEV remediation, continuous monitoring, and posture evaluation
Demonstrated skills in program management, stakeholder communication, audit readiness, and performance reporting
Strong strategic, analytical, organizational, and executive-level communication skills
Ability to support escalations, major incident coordination, and enterprise governance activities
Must be able to obtain a Public Trust clearance
US Citizenship Required: Yes
No visa sponsorship available
Desired: PMP, PgMP, SAFe, CISSP, CISM, CAP, or ITIL v4 certification
Desired: Experience supporting VA or other large federal cybersecurity programs
Desired: Experience leading RMF/ATO programs or Common Control governance
Desired: Technical depth in PKI, ICAM, cloud security, vulnerability tools, database security, middleware/web security, virtualization security, or enterprise monitoring
Desired: Experience managing performance-based contracts with strict KPIs/AQLs

Benefits

Comp & perks

Medical plan options, including plans with Health Savings Accounts
Dental plan options
Vision plan
401(k) plan with pre-tax and post-tax contributions and company match
Full flex work weeks where possible
Paid vacation, sick, personal, holiday, parental, military, bereavement, and jury duty leave
Typically 15 days of paid leave per calendar year
10 paid holidays per year
Up to 160 hours of paid family leave in a rolling 12-month period for eligible employees
Short- and long-term disability benefits
Life insurance
Accidental death and dismemberment insurance
Personal accident insurance
Critical illness insurance
Business travel and accident insurance
AI-powered career advancement tools
Robust internal mobility
Wellness programs
Collaborative, innovative, military-friendly workplace
Opportunities to modernize VA’s cybersecurity posture and lead enterprise transformation