Tech Lead – Vulnerability Management Technology

Leidos

. Lead the technical delivery of vulnerability management technology improvements across multiple engineering, security, infrastructure, application, cloud, and platform teams .

Posted 10/22/2026full-timeRemote • United StatesSenior💰 $154,050 - $278,475 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in vulnerability management, automated remediation, and patch orchestration, with a strong focus on cross-team collaboration and Agile methodologies. Proven ability to lead technical delivery, establish metrics, and ensure compliance with security and operational standards.

Highest-signal resume keywords

Vulnerability ManagementAutomated RemediationAgile SAFe MethodologiesTechnical LeadershipCross-Team Coordination

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Automated Security TestingPatch ManagementCI/CD IntegrationInfrastructure AutomationRisk ManagementAPIs and ScriptingVulnerability ScannersConfiguration ManagementEvent-Driven IntegrationData Quality Improvement

Soft Skills

Analytical SkillsProblem-SolvingCommunicationFacilitationInfluencing Skills

Tools & Technologies

JiraAzure DevOpsSecurity PlatformsTicketing SystemsCloud ServicesEndpoint ManagementDeployment PipelinesOrchestration PlatformsPolicy-as-CodeAutomation Technologies

Certifications & Qualifications

Cybersecurity CertificationsAgile Delivery CertificationsProject Management Certifications

Industry Keywords

Cybersecurity OperationsRisk-Based Vulnerability PrioritizationContinuous MonitoringCompliance ObligationsHigh-Availability Environments

Tech Stack

Tools & technologies

AzureCloudCyber SecurityITSM

About the role

Key responsibilities & impact

Lead the technical delivery of vulnerability management technology improvements across multiple engineering, security, infrastructure, application, cloud, and platform teams
Coordinate cross-team dependencies, priorities, risks, delivery timelines, technical decisions, and implementation activities
Establish and maintain vulnerability management requirements and guide delivery of technical solutions, capabilities, architectures, implementation plans, and measurable outcomes
Promote consistent engineering standards, integration patterns, automation practices, data quality, security controls, and operational processes
Develop and maintain success metrics and reporting frameworks
Support the complete vulnerability management lifecycle, including asset and vulnerability identification, continuous monitoring, risk assessment and prioritization, automated remediation, patch testing and deployment, validation and verification, reporting and metrics, and exception and risk acceptance management
Oversee integration of continuous monitoring, automated security testing, vulnerability intelligence, automated patching, and remediation validation across the technology estate
Oversee end-to-end, machine-driven vulnerability remediation workflows
Coordinate integration of security tools with asset/configuration management, vulnerability scanners, endpoint and patch management, CI/CD, cloud, DevOps, infrastructure automation, IT service management, and reporting platforms
Drive APIs, orchestration, event-driven workflows, infrastructure automation, and policy-as-code to reduce manual handoffs
Ensure automated patching includes deployment rings, canary releases, maintenance windows, pre-deployment testing, rollback, exception handling, and recovery procedures
Collaborate with Product Owners, architects, engineering leads, security teams, operations teams, and delivery stakeholders
Support Agile SAFe ceremonies including PI Planning, backlog refinement, sprint planning, system demos, reviews, and retrospectives
Track delivery progress and resolve technical issues, risks, impediments, and cross-team dependencies
Contribute to roadmaps, solution designs, estimates, business cases, investment proposals, and delivery plans
Ensure solutions are scalable, secure, resilient, supportable, auditable, and aligned with enterprise architecture and cybersecurity requirements
Establish service-level objectives for vulnerability detection, prioritization, remediation, validation, and exception closure
Monitor automation performance using remediation cycle time, automation coverage, patch success rate, rollback rate, validation failure rate, false-positive rate, vulnerability recurrence rate, and manual-intervention metrics
Ensure automated actions are auditable, traceable, policy-compliant, and supported by logging, monitoring, alerting, access controls, and change records
Partner with platform engineering, DevOps, infrastructure, application, cloud, and security teams to embed remediation into development and operational workflows
Lead continuous improvement to increase automation coverage, reduce remediation latency, improve data quality, and remove unnecessary manual intervention
Communicate technical topics, delivery progress, risks, and recommendations to technical and non-technical stakeholders

Requirements

What you’ll need

Master's degree (or equivalent) and 15+ years of experience
Must have an active Secret clearance
Experience working as a Tech Lead, Technical Delivery Lead, Engineering Lead, Security Engineering Lead, or in a similar technical leadership role
Demonstrated experience coordinating technology delivery across multiple technical teams and organizational boundaries
Experience designing, implementing, or operating automated vulnerability remediation and patch orchestration capabilities
Strong understanding of software development lifecycles, modern engineering practices, application architectures, and operational support models
Practical experience working in Agile environments, preferably using the Scaled Agile Framework (SAFe)
Strong understanding of continuous monitoring, automated security testing, CI/CD, DevSecOps, infrastructure automation, and event-driven integration patterns
Understanding of vulnerability management, cybersecurity operations, security tooling, risk management, and risk-based vulnerability prioritization
Experience integrating vulnerability scanners, endpoint management platforms, configuration management tools, ticketing systems, cloud services, security platforms, and deployment pipelines
Knowledge of automated patch validation, deployment safeguards, release management, rollback strategies, and recovery procedures
Experience using APIs, scripting, workflow automation, orchestration platforms, policy-as-code, or similar automation technologies
Ability to establish automation KPIs and use operational data to improve remediation effectiveness
Ability to balance machine-speed remediation with operational resilience, security controls, compliance obligations, change management, and business continuity
Experience defining governance models, approval thresholds, exception processes, and human-oversight controls for automated changes
Ability to manage technical dependencies, delivery risks, competing priorities, and stakeholder expectations
Strong analytical, problem-solving, communication, facilitation, and influencing skills
Experience leading cross-team adoption of automation and standardizing processes across diverse technology environments
Ability to convert business, security, compliance, and operational requirements into actionable technical requirements and deliverable outcomes
Desirable: Experience with enterprise vulnerability management platforms and security scanning technologies
Desirable: Knowledge of risk-based vulnerability management, vulnerability intelligence, exploitability analysis, and exposure management
Desirable: Experience integrating security tools with IT service management, asset management, configuration management, cloud, DevOps, endpoint, and reporting platforms
Desirable: Experience with automated patching solutions and endpoint or server management technologies
Desirable: Familiarity with deployment rings, canary releases, blue-green deployments, automated rollback, and progressive delivery
Desirable: Experience embedding vulnerability remediation into software development and CI/CD pipelines
Desirable: Familiarity with Agile delivery tools such as Jira, Azure DevOps, or equivalent platforms
Desirable: Experience working in regulated, high-availability, or business-critical technology environments
Desirable: Knowledge of cloud security, container security, infrastructure-as-code, software composition analysis, static application security testing, and dynamic application security testing
Desirable: Relevant certifications in cybersecurity, Agile delivery, architecture, cloud, automation, or project management