ZipRecruiter

Log In

1

Vulnerability Management Lead Jobs (NOW HIRING)

Steampunk

Vulnerability Management Lead

Mclean, VA · On-site

$103K - $136K/yr

The Vulnerability Management Lead serves as the primary technical authority for enterprise vulnerability management, partnering with cybersecurity operations, infrastructure, cloud, engineering, and ...

Steampunk

Vulnerability Management Lead

Mclean, VA · On-site

$103K - $136K/yr

The Vulnerability Management Lead serves as the primary technical authority for enterprise vulnerability management, partnering with cybersecurity operations, infrastructure, cloud, engineering, and ...

Steampunk

Vulnerability Management Lead

Mclean, VA · On-site

$103K - $136K/yr

We are seeking a Vulnerability Management Lead responsible for planning, executing, and continuously maturing the enterprise vulnerability management program across a large-scale, complex IT ...

New

Ampcus Inc

Vulnerability Management Lead (RFP)

Washington, DC · On-site

$115K - $152K/yr

They are in search of a highly motivated candidate to join their talented team as a Vulnerability Management Lead, responsible for coordinating vulnerability tracking, remediation support, reporting ...

Valiant Solutions, LLC

The Vulnerability Management Lead directs client's vulnerability management program across the Continuous Diagnostics and Mitigation (CDM), Web Application Surveillance Program (WASP), and Cyber ...

K2United LLC

Vulnerability Management Lead

Washington, DC · On-site

$116K - $152K/yr

Integrate vulnerability management activity into overall risk and compliance support, feeding the POA&M workflow and authorization-boundary tracking maintained by the ISSO/ISCM Lead. * Support risk ...

K2Share LLC

Vulnerability Management Lead

Washington, DC · Remote

Integrate vulnerability management activity into overall risk and compliance support, feeding the POA&M workflow and authorization-boundary tracking maintained by the ISSO/ISCM Lead. * Support risk ...

New

Unissant

Vulnerability Management Lead

Herndon, VA · On-site

$105K - $138K/yr

We are seeking a Vulnerability Management Lead to join our team and support our client. The ideal candidate is a proactive cybersecurity professional with deep experience leading enterprise ...

UNISSANT

Vulnerability Management Lead

Bethesda, MD · On-site

$109K - $144K/yr

We are seeking a Vulnerability Management Lead to join our team and support our client. The ideal candidate is a proactive cybersecurity professional with deep experience leading enterprise ...

Unissant

Vulnerability Management Lead

Herndon, VA · On-site

$105K - $138K/yr

We are seeking a Vulnerability Management Lead to join our team and support our client. The ideal candidate is a proactive cybersecurity professional with deep experience leading enterprise ...

next page

Showing results 1-20

All JobsVulnerability Management Lead Jobs

Vulnerability Management Lead information

See salary details

$42.5K

$123.8K

$180.5K

How much do vulnerability management lead jobs pay per year?

As of Aug 10, 2026, the average yearly pay for vulnerability management lead in the United States is $123,784.00, according to ZipRecruiter salary data. Most workers in this role earn between $102,500.00 and $135,000.00 per year, depending on experience, location, and employer.

What are the key skills and qualifications needed to thrive in the vulnerability management lead position, and why are they important?

To thrive as a Vulnerability Management Lead, you need deep knowledge in cybersecurity practices, vulnerability assessment methodologies, and a strong background in IT systems or network administration, typically backed by a relevant degree and industry certifications like CISSP, CISM, or CompTIA Security+. Familiarity with vulnerability scanning tools such as Nessus, Qualys, or Rapid7, and experience with security information and event management (SIEM) systems are highly valued. Strong leadership, analytical thinking, and effective communication skills help in leading teams, interpreting complex risks, and collaborating with cross-functional partners. These abilities are vital for identifying threats, driving remediation efforts, and maintaining the organization’s overall security posture.

What are the main challenges faced by vulnerability management leads in their day-to-day responsibilities?

Vulnerability Management Leads often face the challenge of prioritizing numerous security risks across diverse systems while ensuring minimal disruption to business operations. They must stay current with the rapidly evolving threat landscape and often coordinate across multiple departments to implement remediation plans effectively. Another common hurdle is balancing technical requirements with organizational constraints, such as resource limitations and compliance demands. Successfully navigating these challenges requires strong problem-solving skills, as well as the ability to clearly communicate risk and urgency to both technical teams and executive leadership.

What is a vulnerability management lead?

A Vulnerability Management Lead is responsible for overseeing an organization's vulnerability management program. They identify, assess, and prioritize security vulnerabilities across systems, networks, and applications. This role involves coordinating with IT and security teams to remediate risks and ensure compliance with security policies and regulations. They also develop strategies, processes, and tools to enhance the organization's security posture. The role requires strong leadership, technical expertise, and the ability to communicate risks effectively to stakeholders.

More about Vulnerability Management Lead jobs
What job categories do people searching Vulnerability Management Lead jobs look for? The top searched job categories for Vulnerability Management Lead jobs are:
Vulnerability Management Lead jobs near you
Infographic showing various Vulnerability Management Lead job openings in the United States as of August 2026, with employment types broken down into 50% Full Time, and 50% Contract. Highlights an 50% In-person, and 50% Remote job distribution, with an average salary of $123,784 per year, or $59.5 per hour.

Vulnerability Management Lead

Steampunk

Mclean, VA • On-site

$103K - $136K/yr

Other

Posted 5 days ago

Job description

Overview
We are seeking a Vulnerability Management Lead responsible for planning, executing, and continuously maturing the enterprise vulnerability management program across a large-scale, complex IT environment supporting more than 30,000 enterprise assets, including servers, workstations, high performance computing (HPC) systems, cloud workloads, and network infrastructure.
The Vulnerability Management Lead serves as the primary technical authority for enterprise vulnerability management, partnering with cybersecurity operations, infrastructure, cloud, engineering, and system owners to identify, prioritize, and drive remediation efforts. This role is responsible for developing risk-based vulnerability management processes, improving automation and reporting capabilities, and ensuring alignment with federal cybersecurity directives, NIST guidance, and organizational security policies.
Contributions
Responsibilities include:
  • Lead the enterprise vulnerability management program across servers, workstations, HPC systems, cloud environments, and network devices supporting more than 30,000 managed assets.
  • Plan, coordinate, and oversee enterprise vulnerability scanning, assessment, prioritization, remediation tracking, validation, and reporting activities.
  • Collaborate with Service Areas, system owners, cloud administrators, cybersecurity engineers, and infrastructure teams to identify, prioritize, and track vulnerability remediation efforts.
  • Develop and maintain risk-based prioritization methodologies utilizing exploitability, threat intelligence, asset criticality, and business impact to mature enterprise vulnerability management practices.
  • Drive enterprise remediation activities in alignment with applicable federal directives, including Binding Operational Directive (BOD) 22-01, and organizational security requirements.
  • Develop and enhance enterprise vulnerability management processes, procedures, templates, and operational standards.
  • Design and implement automation solutions that improve vulnerability data collection, remediation tracking, reporting, and operational efficiency.
  • Leverage automation and artificial intelligence/machine learning (AI/ML) capabilities to improve vulnerability scan integration, prioritization, reporting, and risk trend prediction across the enterprise vulnerability management program.
  • Develop and maintain enterprise dashboards, weekly reporting, and executive visualizations utilizing Power BI, Power Apps, SharePoint, and similar enterprise reporting platforms, including R/Y/G reporting and heat-map visualizations.
  • Identify tool, process, and data flow improvement opportunities while maintaining the Vulnerability Management Process Improvement Plan and Vulnerability Management Automation Plan to continuously mature the enterprise vulnerability management program.
  • Ensure vulnerability management activities align with NIST SP 800-53, organizational policies, and applicable federal cybersecurity directives, including BOD 22-01.
  • Develop and maintain vulnerability management documentation, including standard operating procedures (SOPs), remediation guidance, risk mitigation strategies, process improvement plans, and automation roadmaps.
  • Identify opportunities to improve enterprise vulnerability management through process optimization, workflow improvements, enhanced automation, and data quality initiatives.
  • Support continuous monitoring activities and collaborate with stakeholders to strengthen the organization's overall cybersecurity posture.
  • Stay current on emerging vulnerabilities, threat intelligence, federal cybersecurity directives, and industry best practices.

Qualifications
Required
  • Ability to obtain and maintain a U.S. government Security Clearance.
  • Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or a related field (or equivalent combination of education and experience).
  • Minimum of 5 years of hands-on experience supporting enterprise vulnerability management, cybersecurity operations, and risk remediation workflows.
  • Experience managing enterprise vulnerability management programs across more than 30,000 enterprise assets, including servers, workstations, high performance computing (HPC) systems, cloud workloads (AWS, Azure, and Google Cloud Platform), and network devices while driving patching and remediation activities in accordance with BOD 22-01.
  • Experience collaborating with Service Areas, system owners, cloud administrators, cybersecurity engineers, and infrastructure teams to identify, prioritize, and track vulnerability remediation efforts.
  • Experience developing and implementing risk-based prioritization methodologies utilizing exploitability, threat intelligence, asset criticality, and business impact to mature enterprise vulnerability management practices.
  • Experience leveraging automation and AI/ML capabilities to improve vulnerability scan integration, prioritization, reporting, and risk trend prediction.
  • Experience developing enterprise dashboards, weekly reporting, and operational metrics utilizing Power BI, Power Apps, SharePoint, and similar enterprise reporting platforms, including R/Y/G reporting and heat-map visualizations.
  • Experience identifying enterprise tool, process, and data flow improvement opportunities while maintaining vulnerability management process improvement and automation plans.
  • Experience developing enterprise vulnerability management processes, standard operating procedures, documentation, and continuous process improvement initiatives.
  • Strong knowledge of federal cybersecurity requirements, including NIST SP 800-53 and applicable federal vulnerability management directives.
  • Strong analytical, organizational, written, and verbal communication skills with the ability to communicate effectively across technical and executive stakeholders.

Preferred
  • Experience supporting cybersecurity programs within a federal government environment.
  • Experience supporting enterprise continuous monitoring initiatives.
  • One or more of the following certifications:
    • CompTIA Security+
    • CISSP
    • CISM
    • CISA
    • CCSP
    • OSCP

About steampunk
Steampunk is a Change Agent in the Federal contracting industry, bringing new thinking to clients in the Homeland, Federal Civilian, Health and DoD sectors. Through our Human-Centered delivery methodology, we are fundamentally changing the expectations our Federal clients have for true shared accountability in solving their toughest mission challenges. As an employee owned company, we focus on investing in our employees to enable them to do the greatest work of their careers - and rewarding them for outstanding contributions to our growth. If you want to learn more about our story, visit http://www.steampunk.com.
We are an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status, or any other characteristic protected by law. Steampunk participates in the E-Verify program.

Apply