Vulnerability Manager Lead

Location: Herndon, VA

Department: Cybersecurity

Dark Wolf is seeking a Vulnerability Management Lead to oversee technical vulnerability operations, modern AI workload security, and compliance baselines across a large-scale, multi-tenant cloud government system. Working closely with cross-functional engineering teams, system administrators, and program leadership, the Lead will drive the end-to-end vulnerability lifecycle from initial detection through final remediation.

We are seeking a collaborative cybersecurity professional with a solid foundation in federal or DoD vulnerability management, cloud environments, and technical risk assessment. This position offers the opportunity to lead operational workflows, leverage data analysis (SQL) and tool integrations (REST APIs) to automate reporting, and help shape security strategies for modern platforms—including emerging AI/LLM workloads.

Whether you are an experienced Lead or a Senior Vulnerability/Systems Analyst ready to take the next step in leadership, this role provides an impactful platform to guide technical risk decisions across a mission-critical system. This position is based out of Arlington, VA with hybrid/remote opportunities. Additional responsibilities include:

Key Responsibilities

• Oversee daily vulnerability identification, triage, and reporting across AWS cloud assets, traditional hybrid infrastructure, and AI/LLM application stacks. 
• Evaluate raw vulnerability data generated by ACAS (Tenable.sc) and AWS security tools to determine its actual threat vector; identify true contextual risk based on compensating controls, network exposure, and the system's specific cloud architecture.
• Leverage ACAS to execute and analyze SCAP-compliant configuration audits, verifying system alignment with established DISA STIG security benchmarks and identifying configuration drift across cloud assets. 
• Monitor, document, and track the end-to-end lifecycle of technical remediation efforts.
• Establish and manage cybersecurity vulnerability tickets within Jira to maintain a clear audit trail from identification to closure.
• Serve as a primary point of contact for hands-on IT support, system administrators, and engineers; clearly communicate the technical details of vulnerabilities, outline required remediation steps, and assist in prioritizing patches.
• Translate un-remediated, high-true-risk vulnerabilities into actionable Plan of Action and Milestones (POA&Ms), clearly detailing the technical milestones and business impacts.
• Translate complex technical findings and AI-specific security risks into concrete, step-by-step remediation guidance for platform, data science, and DevOps engineering teams. 
• Collaborate with the team to cross-reference active exploit intelligence against known system vulnerabilities, refining true risk prioritizations based on active real-world threats.
• Compile and deliver vulnerability posture reports, metrics dashboards, and executive briefings for government stakeholders. 
• Mentor mid-level analysts on triage methodologies, emerging AI threat vectors, technical writing, and workflow automation. 

Required Qualifications

• 6+ years of experience in Cybersecurity, Vulnerability Management, or Systems Administration supporting federal or DoD information systems.
• Direct, hands-on experience utilizing ACAS (Tenable.sc) to filter, analyze, and report on enterprise vulnerabilities.
• Operational understanding of the Security Content Automation Protocol (SCAP) ecosystem, including how automated configuration audit files translate into compliance metrics within vulnerability scanners.
• Comprehensive understanding of how Splunk Enterprise Security and Trellix (ESS) correlate with vulnerability monitoring activities 
• Practical experience writing SQL queries for reporting and/or analytics
• Proven proficiency utilizing Jira (or equivalent enterprise ticketing infrastructure) to track, update, and manage technical workflows through completion.
• Excellent interpersonal and written communication skills, with a demonstrated ability to translate complex security vulnerabilities into actionable guidance for IT personnel.
• Solid understanding of core AWS services (EC2, VPC, Security Groups, IAM) and how vulnerabilities manifest within a cloud-native environment.
• Must hold an active DoD 8570/8140 IAT Level II certification (e.g., Security+, CySA+).
• U.S. Citizenship with an active Top Secret security clearance

Desired Qualifications

• Possess a valid DISA certification for ACAS, Trellix, or Splunk issued or renewed within the last three years, or demonstrate the capability to successfully obtain the required DISA certification upon hire.
• Familiarity with tracking vulnerabilities across containerized microservices (Docker/Kubernetes) or modern data platforms like Databricks.
• Ability to identify and evaluate vulnerabilities unique to AI/LLM environments, including model training/inference pipelines, API endpoints, microservices, and AI framework dependencies (e.g., PyTorch, LangChain, Hugging Face) using frameworks like the OWASP Top 10 for LLM Applications.

The salary range for this position is estimated to be between $155,000.00 - $160,000.00, commensurate on experience and technical skillset.

We are proud to be an EEO/AA employer Minorities/Women/Veterans/Disabled and other protected categories.

In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification form upon hire.

We are strictly looking for direct, full-time W2 employees. We do not engage with third-party staffing agencies, C2C, or 1099 independent contractors for this role.