Senior Vulnerability Management Specialist

Senior Vulnerability Management Specialist

Location: Remote


Job Summary

STAFFXPERT LLC is seeking a Senior Vulnerability Management Specialist on behalf of our client in a Remote location. This position is ideal for an experienced cybersecurity professional with a strong background in enterprise vulnerability management, federal cybersecurity frameworks, cloud security, and governance, risk, and compliance (GRC). The successful candidate will play a key role in strengthening the organization''s security posture by leading vulnerability assessments, driving remediation efforts, supporting compliance initiatives, and collaborating with cross-functional stakeholders to ensure continuous improvement of enterprise security programs.


Key Responsibilities

• Lead and manage enterprise vulnerability management activities in accordance with industry and federal cybersecurity standards.
• Conduct vulnerability assessments across on-premises systems, cloud environments, containerized workloads, and Infrastructure-as-Code (IaC) deployments.
• Track security findings through remediation, validation, and closure while maintaining accurate documentation.
• Develop and manage Plans of Action and Milestones (POA&Ms) using CSAM or comparable Governance, Risk, and Compliance (GRC) platforms.
• Integrate vulnerability data with SIEM and IT service management platforms to streamline remediation workflows.
• Assess CI/CD pipeline security and implement policy-as-code practices to identify vulnerabilities early in the software development lifecycle.
• Apply NIST Risk Management Framework (RMF) and security controls to support risk assessments, compliance initiatives, and continuous monitoring.
• Support internal and external security audits by preparing documentation, evidence, and remediation plans.
• Develop and maintain security documentation, including standard operating procedures, implementation guides, playbooks, policies, and risk reports.
• Present technical findings and risk recommendations to both technical teams and executive leadership.
• Collaborate with cross-functional teams to ensure timely resolution of identified security risks.

Required Qualifications

• Bachelor''s degree in Cybersecurity, Information Technology, Computer Science, Information Systems, Engineering, or a related technical discipline.
• 6+ years of experience in cybersecurity, vulnerability management, information security, or a related field.
• Strong experience with enterprise vulnerability management programs and security assessment processes.
• Hands-on experience performing vulnerability assessments across cloud, containerized, and traditional infrastructure environments.
• Experience managing remediation efforts and POA&Ms using CSAM or comparable GRC platforms.
• Working knowledge of NIST Risk Management Framework (RMF), NIST SP 800-53 Security Controls, and Information Security Continuous Monitoring practices.
• Experience supporting compliance initiatives and security audits.
• Familiarity with CI/CD security, Infrastructure-as-Code (IaC), and policy-as-code implementations.
• Experience integrating vulnerability management tools with SIEM and IT service management platforms such as ServiceNow.
• Strong analytical, organizational, and problem-solving skills.
• Excellent written and verbal communication skills with the ability to communicate effectively with both technical and business stakeholders.

Preferred Qualifications

• Experience with vulnerability management and security tools such as Tenable Nessus, Splunk, and Governance, Risk & Compliance (GRC) platforms.
• Familiarity with OWASP security principles and cloud-native security practices.
• Experience using Microsoft Power BI, Microsoft Teams, and SharePoint.
• Knowledge of Agile project management methodologies.
• Professional cybersecurity certifications such as Certified Information Security Manager (CISM), CompTIA Security+, or other relevant industry certifications.