Vulnerability Management Lead

About the Role

Booz Allen is seeking a Vulnerability Management professional to support DoD clients by modernizing ACAS capabilities and designing enterprise-scale STIG compliance solutions. This role is positioned as a trusted advisor and technical lead, helping clients move from fragmented compliance execution to repeatable enterprise cyber risk management, continuous monitoring, and mission velocity.

Responsibilities

• Lead ACAS modernization efforts, transitioning Tenable deployments from basic scanning to enterprise vulnerability management services.
• Modernize ACAS implementation by assisting with standardizing scan policies, credentialed coverage, asset tagging, and data hygiene.
• Design contractor-operated workflows for vulnerability intake, prioritization, remediation tracking, and risk acceptance.
• Integrate ACAS outputs into customer POA&M processes, ATO sustainment activities, and reporting requirements.
• Advise government stakeholders on vulnerability prioritization, risk tradeoffs, and RMF integration.
• Partner with cyber engineering, architecture, and RMF teams to align vulnerability management with Zero Trust modernization initiatives.
• Produce executive-level briefings on cyber risk posture, trends, and remediation effectiveness.
• Develop enterprise STIG compliance frameworks that enable control inheritance, reuse, and automation across systems.
• Standardize STIG baselines, tailoring decisions, and documentation to reduce per-system compliance burden.
• Implement and maintain SCAP or STIG tooling such as SCC, OpenSCAP, and vendor solutions, across server, endpoint, and platform technologies.
• Produce defensible STIG artifacts and evidence packages to support ATOs and continuous monitoring.
• Advise system owners and ISSMs on remediation strategies and risk-based deviations.
• Automate repeatable tasks using scripting and workflow tooling, where feasible.
• Integrate ACAS and STIG outputs with customer ticketing, GRC, or reporting systems.

Requirements

• 4+ years of experience leading automation projects using Infrastructure as Code (IaC)
• 3+ years of experience supporting DoD or IC customer cybersecurity programs
• Experience with ACAS, including Tenable.sc or Nessus, in enterprise environments
• Experience designing enterprise STIG compliance solutions
• Knowledge of RMF, NIST 800-53, POA&M management, and continuous monitoring
• Active TS/SCI clearance; willingness to take a polygraph exam
• Ability to obtain a DoD 8570 IAT Level III Certification within 60 days of start date
• Ability to obtain a DoD 8570.01-M Cybersecurity Service Provider - Infrastructure Support Certification within 30 days of start date

Qualifications

• Associate’s degree and 5+ years of experience supporting IT projects and activities
• Bachelor’s degree and 3+ years of experience supporting IT projects and activities
• Master’s degree and 1+ years of experience supporting IT projects and activities

Skills

• Experience with ServiceNow, Xacta, eMASS, or similar GRC or ATO tooling (Nice to Have)
• Experience with scripting or automation using tools such as Python and PowerShell (Nice to Have)
• Experience with relational databases, such as SQL (Nice to Have)
• Experience with data visualization tools, such as Tableau or Power BI (Nice to Have)
• Experience in cloud or hybrid DoD environments such as AWS GovCloud and Azure Government (Nice to Have)
• Ability to mentor junior staff and contribute to internal IP, Ansible playbooks, and reusable artifacts (Nice to Have)

Clearance

Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information. TS/SCI clearance is required.

Benefits

Booz Allen offers health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values.

Pay

The projected compensation range for this position is $99,000.00 to $225,000.00 (annualized USD). The estimate displayed represents the typical salary range for this position and is just one component of Booz Allen’s total compensation package for employees.