Vulnerability Management

Req ID: 390742 

NTT DATA strives to hire exceptional, innovative and passionate individuals who want to grow with us. If you want to be part of an inclusive, adaptable, and forward-thinking organization, apply now.

We are currently seeking a Senior Vulnerability Management Lead to join our team in Arlington (REMOTE), Virginia (US-VA), United States (US).

Job Summary:

The Senior Vulnerability Management Lead provides technical leadership and hands‑on expertise to secure federal information systems in accordance with NIST Risk Management Framework (RMF), FISMA, HIPAA, and agency‑specific requirements. This role oversees vulnerability management operations, leads incident response planning and execution, and ensures continuous security compliance to support Authorization to Operate (ATO) maintenance. Working closely with cross‑functional IT teams, the Team Lead strengthens cybersecurity posture through proactive threat mitigation, audit readiness, and the implementation of enterprise security controls.

Responsibilities

• Lead full lifecycle NIST RMF activities, including categorization, control implementation, security assessment, POA&M management, and ATO sustainment.
• Ensure compliance with federal security standards such as FISMA, HIPAA, and agency‑specific security policies.
• Coordinate with assessment and authorization stakeholders to maintain documentation, respond to findings, and support audits and system reviews.
• Review scan results, validate findings, determine criticality, and coordinate remediation with system owners and operations teams.
• Develop and maintain processes for continuous monitoring, risk scoring, and reporting to leadership.
• Integrate threat intelligence platforms to identify emerging risks and drive proactive mitigation strategies.
• Support security audits, penetration tests, and secure configuration enforcement.
• Lead coordination with internal security teams, IT operations, legal/compliance, and government stakeholders to ensure proper handling, documentation, and reporting.
• Conduct post‑incident reviews and improve incident response plans and playbooks.
• Guide the implementation and maintenance of security controls across infrastructure, applications, and cloud environments.
• Provide expertise in secure architecture, configuration management, identity and access management, and audit log review.
• Analyze system changes for security impacts and support change control processes.
• Drive continuous improvement, standardization, and security optimization across the program.
• Supervise cybersecurity engineers and specialists, providing mentorship, task direction, and performance oversight.
• Facilitate collaboration with network, server, cloud, and application teams to ensure timely vulnerability remediation and control implementation.