ZipRecruiter

Log In

1

Vulnerability Program Manager Jobs in Washington

K2United LLC

Vulnerability Management Lead

Washington, DC · On-site

$116K - $152K/yr

Our programs make a meaningful difference. CareerSafe supports more than two million users each ... Key Responsibilities * Operate vulnerability management as a sustained enterprise function ...

TestPros

Cybersecurity Program Manager

Washington, DC · On-site

$160K - $230K/yr

Manage vulnerability assessment and remediation programs utilizing tools such as Tenable/Nessus, ACAS, Qualys, Rapid7, and Splunk. * Oversee cybersecurity audits, inspections, and assessments.

Testpros

Cybersecurity Program Manager

Washington, DC · On-site

$150 - $200/hr

Manage vulnerability assessment and remediation programs utilizing tools such as Tenable/Nessus, ACAS, Qualys, Rapid7, and Splunk. * Oversee cybersecurity audits, inspections, and assessments.

Paragon Technology

Program Manager

Washington, DC · On-site

Program Manager Paragon Technology Group is seeking an experienced Program Manager to provide ... vulnerability management, security governance, compliance, and risk management. * Ensure ...

Socket.dev

Program Manager

Washington, DC · On-site

$150 - $200/hr

Program Manager Paragon Technology Group is seeking an experienced Program Manager to provide ... Authority to Operate activities; * vulnerability management and continuous monitoring ...

Revolutional, LLC

Program Manager

Washington, DC · On-site

$165/hr

Direct all technical, operational, financial, and administrative aspects of program execution across security operations, incident response, threat intelligence, vulnerability management, and ...

Paragon Technology

Deputy Program Manager

Washington, DC · On-site

$125 - $150/hr

Authority to Operate; * cybersecurity compliance; * vulnerability management and continuous monitoring. * Experience with program transition, staffing management, risk management, and federal ...

ActioNet, Inc.

Program Manager

Vienna, VA · On-site

$270K/yr

... vulnerability management * The Program Manager is responsible for the timely delivery of all Contract Data Requirements List items, including SPRIP documentation, equipment lifecycle tracking, SLA ...

ActioNet

Program Manager

Vienna, VA · On-site

$270K/yr

... vulnerability management * The Program Manager is responsible for the timely delivery of all Contract Data Requirements List items, including SPRIP documentation, equipment lifecycle tracking, SLA ...

ActioNet, Inc.

Program Manager

Vienna, VA · On-site

$270K/yr

... vulnerability management * The Program Manager is responsible for the timely delivery of all Contract Data Requirements List items, including SPRIP documentation, equipment lifecycle tracking, SLA ...

ActioNet, Inc.

Program Manager

Vienna, VA · On-site

$270K/yr

... vulnerability management * The Program Manager is responsible for the timely delivery of all Contract Data Requirements List items, including SPRIP documentation, equipment lifecycle tracking, SLA ...

ActioNet

Program Manager

Vienna, VA · On-site

$270K/yr

... vulnerability management * The Program Manager is responsible for the timely delivery of all Contract Data Requirements List items, including SPRIP documentation, equipment lifecycle tracking, SLA ...

ActioNet

Program Manager

Vienna, VA · On-site

... vulnerability management * The Program Manager is responsible for the timely delivery of all Contract Data Requirements List items, including SPRIP documentation, equipment lifecycle tracking, SLA ...

Zantech

Program Manager

Washington, DC

The Program Manager will be critical to program success, serving as the single point of contact for ... Vulnerability and risk management * Remediation management experience * Configuration management

Zantech

Program Manager

Washington, DC · On-site

The Program Manager will be critical to program success, serving as the single point of contact for ... Vulnerability and risk management * Remediation management experience * Configuration management

Nightwing

Program Manager

Sterling, VA · On-site

$99K - $206K/yr

Our capabilities include cyber space operations, cyber defense and resiliency, vulnerability ... Nightwing is seeking a talented Program Manager to lead a dynamic network engineering team in a ...

Nwis

Program Manager

Sterling, VA · On-site

$99K - $206K/yr

Our capabilities include cyber space operations, cyber defense and resiliency, vulnerability ... Nightwing is seeking a talented Program Manager to lead a dynamic network engineering team in a ...

Nwis

Program Manager

Herndon, VA · On-site

$99K - $206K/yr

Our capabilities include cyber space operations, cyber defense and resiliency, vulnerability ... Nightwing is seeking a talented Program Manager to lead a dynamic network engineering team in a ...

next page

Showing results 1-20

All JobsVulnerability Program JobsVulnerability Program Manager JobsVulnerability Program Manager Jobs in Washington

Vulnerability Program Manager information

What cities in Washington are hiring for Vulnerability Program Manager jobs?

Cities in Washington with the most Vulnerability Program Manager job openings:

Infographic showing various Vulnerability Program Manager job openings in Washington as of August 2026, with employment types broken down into 1% As Needed, 78% Full Time, 18% Part Time, 1% Temporary, and 2% Contract. Highlights an 96% Physical, 1% Hybrid, and 3% Remote job distribution.

Vulnerability Management Lead

Washington, DC • On-site

K2United LLC
See more jobs at K2United LLCexternal

$116K - $152K/yr

Contractor

Re-posted 3 days ago

Job description

Job Type
Contract
Description
K2United is an organization that houses two distinct, national, customer-facing brands tied together by a shared purpose: setting the standard for an extraordinary workplace. Through our brands, K2Share and CareerSafe, we provide advisory services in cyber risk management and online education for workforce readiness.
Our four core values define how we show up every day:
  • Respect Others - We lead with respect, building trust and connection.
  • Internally Driven - We are relentlessly compelled to accomplish our objectives.
  • Collaborative Innovation - We create by listening, sharing, and working together.
  • Client Success - We hold our clients' mission as our own.

We believe in people who are accountable, curious, and motivated to make an impact that matters.
Our programs make a meaningful difference. CareerSafe supports more than two million users each year, while K2Share delivers cybersecurity and IT solutions that strengthen federal agencies. As part of our team, you'll help solve complex challenges in a mission-driven, small-business environment that values professional growth, collaboration, and work-life balance.
Position Summary
Own enterprise vulnerability management as a sustained program function - tracking, analysis, prioritization, remediation coordination, and trend reporting across systems, applications, devices, and other in-scope assets. This position converts scan output into risk-informed decisions, drives remediation to closure with system and business stakeholders, and integrates vulnerability data into the broader risk and compliance picture.
Key Responsibilities
  • Operate vulnerability management as a sustained enterprise function: identification, documentation, prioritization, monitoring, and closure across all in-scope assets.
  • Analyze vulnerability data, scan results, remediation status, and related security findings to enable risk-based decision making.
  • Coordinate remediation with system owners and stakeholders; assist in evaluating remediation actions, timelines, and residual risk.
  • Identify aging vulnerabilities and recurring or systemic issues; recommend process improvements and risk-reduction measures.
  • Lead recurring vulnerability review meetings with applicable stakeholders to review status and support remediation planning.
  • Produce periodic reporting covering severity, age, trend, and system-level status.
  • Provide monthly vulnerability reporting and an accompanying risk mitigation plan. Escalate critical and high vulnerabilities to the client's Chief Information Officer and Chief Information Security Officer and drive remediation as rapidly as possible, with POA&Ms established and prioritized by the risks implicated.
  • Integrate vulnerability management activity into overall risk and compliance support, feeding the POA&M workflow and authorization-boundary tracking maintained by the ISSO/ISCM Lead.
  • Support risk identification, analysis, tracking, and mitigation related to vulnerabilities, control gaps, and system changes.

Requirements
  • Bachelor's degree in cybersecurity, information technology, or a related field. Equivalent experience considered in lieu of degree.
  • Six or more years in vulnerability management, including at least two years leading or coordinating an enterprise vulnerability program.
  • Hands-on proficiency with enterprise vulnerability scanning and management platforms - Tenable, Qualys, Rapid7, Microsoft Defender Vulnerability Management, or equivalent.
  • Demonstrated ability to apply risk-based prioritization beyond raw CVSS, incorporating exploitability, the CISA Known Exploited Vulnerabilities catalog, asset criticality, and compensating controls.
  • Experience driving remediation across organizational boundaries with system owners who do not report to the vulnerability function.
  • Experience producing executive-facing vulnerability trend reporting and defensible remediation timelines aligned to federal expectations.
  • Working knowledge of POA&M processes and NIST vulnerability management controls.

Preferred Qualifications
  • Cloud and container vulnerability management experience - Azure and Microsoft 365, AWS, container image scanning.
  • Experience correlating vulnerability data with SIEM and EDR telemetry to support threat-hunting hypotheses.
  • Experience with SBOM analysis and the vulnerability implications of supply chain risk.

Required Certifications
A relevant cybersecurity certification demonstrating competence in vulnerability management, risk, or operations support. Acceptable examples include CompTIA CySA+, GIAC GEVA or GCIH, a Tenable or Qualys vendor certification, CISSP, or CRISC.
Applicants must be willing to take a drug test and submit to a credit and background investigation as part of the selection process.
The U.S. government restricts access by Foreign Nationals to certain types of technology and technical data. Consequently, this posting is intended only for U.S. citizens.
K2United, LLC is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability, or protected Veteran status.
This job description is not an exhaustive list of job responsibilities. K2United management reserves the right to change or alter this job description at any time without notice.

Apply