Responsibilities
Peraton is seeking a Vulnerability Management Lead to join our Team. This person will be responsible for overseeing and advancing the organization’s vulnerability management program to identify, assess, prioritize, and drive remediation of security vulnerabilities across enterprise infrastructure, applications, cloud environments, and systems. This role provides strategic and technical leadership in vulnerability identification, risk-based prioritization, remediation coordination, and continuous monitoring to reduce the organization’s attack surface and overall cybersecurity risk.
The Vulnerability Management Lead partners closely with security operations, infrastructure, cloud, application development, and business teams to establish effective remediation processes, enforce security standards, and improve vulnerability management maturity. The role also drives automation, reporting, and performance measurement while providing actionable risk insights to technical teams and senior leadership to support informed decision-making and strengthen the organization’s overall security posture.
Work Location: This is a remote position, but candidate must be willing to work during the hours of 8am - 5pm EST
What You Will Do
- Lead vulnerability management activities across enterprise infrastructure, applications, and cloud environments, ensuring vulnerabilities are identified, assessed, prioritized, tracked, and remediated in accordance with organizational security requirements.
- Manage and maintain Plans of Action and Milestones (POA&Ms), tracking remediation progress, documenting security findings, and coordinating with stakeholders to ensure timely closure of identified weaknesses.
- Support Authorization to Operate (ATO) processes by providing vulnerability assessment results, remediation evidence, risk assessments, and supporting documentation required for security authorization and compliance activities.
- Develop and maintain dashboards, metrics, and management reports to communicate vulnerability trends, remediation status, risk exposure, compliance posture, and program effectiveness to technical teams and senior leadership.
- Collaborate with Information System Owners (ISOs), Information System Security Officers (ISSOs), compliance teams, and engineering stakeholders to coordinate remediation efforts, resolve technical challenges, and ensure alignment with security policies and regulatory requirements.
- Administer, maintain, and optimize vulnerability management tools, including Tenable and Aqua Security (AquaSec), to improve vulnerability visibility, assessment coverage, and remediation workflows.
- Support the integration of vulnerability management data with the Continuous Diagnostics and Mitigation (CDM) program and associated tools to improve enterprise-wide visibility, reporting, and continuous monitoring capabilities.
- Establish and track key performance indicators (KPIs) and metrics, such as vulnerability remediation timelines, risk reduction, overdue findings, and remediation compliance, to drive accountability and continuous program improvement.