Vulnerability Management Specialist III

Huntsville, AL

Vulnerability Management Specialist III
Responsibilities:

Support vulnerability lifecycle management across enterprise systems.
Correlate vulnerability scan results (e.g., Tenable, Nessus, ACAS) with asset inventories and mission risk.
Drive patch prioritization aligned with threat intelligence. Supports RMF and POA&M inputs.
Support vulnerability identification, analysis, and remediation across enterprise systems.
Conduct and correlate vulnerability scans using tools such as Tenable/Nessus, Qualys, ACAS.
Align vulnerability findings with asset inventories and mission-critical systems.
Perform criticality assessments and prioritize patching based on CVE/CVSS scores and threat intelligence.
Coordinate mitigation efforts with IT, security, and operations teams.
Maintain and update vulnerability management policies, procedures, and documentation.
Support RMF (Risk Management Framework) compliance and contribute to POA&M inputs.
Support executive-level briefings and reports on vulnerability status and remediation progress.
Stay current with emerging threats, vulnerabilities, and mitigation strategies.
Other duties as assigned.

Qualifications:

Bachelor’s degree in computer science, Information Systems or related field.
6+ years of experience in vulnerability management with 6-8 years in cybersecurity or IT operations.
- Proficient in Tenable/Nessus, Qualys, ACAS.
Certifications: CEH or equivalent desired.
Must meet DoD 8570 IAT Level II requirements.
Must have active Secret clearance.

Knowledge, Skills and Abilities:

Excellent communication, leadership, and project management skills.
Proficiency with vulnerability scanning tools: Tenable/Nessus, Qualys, ACAS.
Familiarity with HBSS/ESS, STIGs, and patch management systems.
Strong understanding of CVE/CVSS scoring, vulnerability databases, and threat modeling.
Experience with RMF, POA&M, and DoD cybersecurity compliance frameworks.
Ability to assess risk and impact of vulnerabilities in complex environments.
Skilled in correlating scan data with asset inventories and mission priorities.
Capable of developing and executing vulnerability mitigation strategies.
Ability to brief executives and collaborate across cross-functional teams.
Strong organizational skills, with excellent verbal and written ability.
Ability to work both independently and within a team.
Ability to meet minimum clearance requirements.
Ability to work nights, weekends, and holidays as required.
Ability to travel up to 10%.