Vulnerability Management Engineering Lead

Location: Quantico, VA (Onsite – Russell-Knox Building)
Company: G2IT
Security Clearance: Active Top Secret with SCI Eligibility (TS/SCI)

About the Opportunity

G2IT is seeking an experienced Vulnerability Management Engineering Lead to join our cybersecurity team supporting a critical Department of Defense (DoD) mission in Quantico, VA.

This is an excellent opportunity for a cybersecurity professional who enjoys solving complex security challenges, strengthening enterprise defenses, and protecting mission-critical government networks.

In this role, you will lead vulnerability analysis, patch management, security compliance, and remediation efforts across thousands of endpoints operating in highly secure environments, including NIPRNet, SIPRNet, and JWICS.

You will work with cybersecurity engineers, system administrators, and security leadership to identify vulnerabilities, prioritize remediation, improve security processes, and maintain compliance with DoD cybersecurity standards.

If you have hands-on experience with ACAS, Nessus, DISA STIGs, MECM/SCCM, and eMASS, we encourage you to apply!

Key Responsibilities

• Lead Vulnerability Management: Analyze ACAS/Nessus scan results to identify, assess, and prioritize security vulnerabilities across enterprise systems.

• Drive Security Remediation: Develop and coordinate remediation plans for CAT I, II, and III vulnerabilities, ensuring compliance with DoD requirements and established deadlines.

• Manage Patch Deployment: Engineer, test, and deploy operating system and third-party security patches using MECM/SCCM and Microsoft Intune.

• Improve Security Compliance: Evaluate systems against DISA STIGs using STIG Viewer, SCAP Compliance Checker, and other security assessment tools.

• Support Risk Management: Maintain Plans of Action and Milestones (POA&Ms) in eMASS, documenting security risks, mitigation strategies, and remediation progress.

• Troubleshoot Security Issues: Investigate patch failures, non-compliant endpoints, and recurring vulnerabilities to identify root causes and implement solutions.

• Develop Security Reports: Produce vulnerability assessments, STIG compliance reports, and cybersecurity metrics for leadership and government stakeholders.

• Collaborate Across Teams: Work closely with ISSOs, system administrators, and cybersecurity personnel to coordinate remediation and maintain security standards.

• Enhance Security Processes: Identify opportunities to automate vulnerability management, improve patch deployment, and reduce remediation timelines.

Required Qualifications

• U.S. Citizenship is required.

• Active Top Secret clearance with SCI eligibility and a favorably adjudicated Tier 5/Tier 5 Reinvestigation (T5/T5R), with investigation currency or Continuous Evaluation/Vetting eligibility.

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field, plus at least 4 years of relevant experience. An additional 4 years of relevant experience may substitute for the degree.

• Minimum 4 years of experience in cybersecurity, vulnerability management, security compliance, or RMF continuous monitoring within DoD or federal environments.

• Current DoD 8570/8140 IAT Level II certification, such as Security+ CE, CySA+, GSEC, SSCP, or another qualifying certification.

• Hands-on experience with ACAS/Nessus vulnerability scanning and analysis.

• Experience using DISA STIG Viewer and SCAP Compliance Checker to assess system security.

• Familiarity with MECM/SCCM, patch management, and enterprise endpoint security.

• Experience maintaining POA&Ms, security documentation, and compliance evidence in eMASS.

• Knowledge of NIST SP 800-53, Risk Management Framework (RMF), DISA STIGs, and DoD cybersecurity requirements.

• Understanding of Windows and Linux operating systems, Active Directory, networking, and endpoint management.

• Strong troubleshooting, analytical, documentation, and communication skills.

• Ability to work independently and effectively collaborate with technical and cybersecurity teams.

Preferred Qualifications

• Experience supporting DoD, Department of War, or Intelligence Community networks.

• Experience working across classified and unclassified environments, including NIPRNet, SIPRNet, and JWICS.

• Knowledge of Microsoft Intune, HBSS/ESS, and enterprise security monitoring tools.

• Familiarity with USCYBERCOM/JFHQ-DODIN directives and IAVM compliance requirements.

• Experience creating cybersecurity dashboards and reports using Power BI.

• Experience with ServiceNow or similar IT Service Management (ITSM) platforms.

• Experience improving vulnerability management workflows through automation.

Why Join G2IT?

At G2IT, you will have the opportunity to apply your cybersecurity expertise to a meaningful national defense mission while working alongside experienced IT and security professionals.

This position offers the chance to take ownership of enterprise vulnerability management initiatives, contribute to security improvements, and help protect critical government information systems.

Annual Salary: $100,000–$130,000, depending on experience and qualifications.