Responsibilities
- Oversee vulnerability scanning across enterprise systems including on-premises infrastructure, cloud workloads, containers, and web applications using Tenable ONE, AquaSec, and CDM-integrated tools.
- Manage end-to-end remediation workflows from detection to closure, coordinating with Policy, Risk & Compliance teams on POA&M documentation and tracking.
- Collaborate with Information System Owners, ISSOs, compliance personnel, and engineering units to prioritize findings, assign accountability, and meet federal and agency deadlines.
- Lead Cyber Hygiene initiatives, including weekly scans of public-facing assets, analysis of CISA reports, and timely distribution of findings to ISSOs within two business days.
- Maintain an up-to-date, authoritative list of externally accessible IP addresses and URLs, updated in real time and reconciled monthly.
- Monitor expiration dates of digital certificates, issue alerts 30 days in advance, and escalate unresolved cases within 10 days.
- Lead Web Application Scanning Program (WASP) activities, including static and dynamic analysis of client applications in development and production, plugin updates, and integration of CISA Known Exploited Vulnerabilities into scan coverage.
- Conduct threat modeling for high-value applications and ensure WASP results inform remediation plans and appear in Cyber Hygiene reporting dashboards.
- Operate and sustain the CDM data integration layer, ensuring vulnerability data flows into SIEM platforms for centralized monitoring, supporting VUL capability and AWARE-based risk prioritization.
- Design and maintain performance dashboards tracking key metrics such as remediation cycle times, scan coverage, KEV exposure, certificate health, and aging POA&Ms.
- Coordinate with OCIO, Cyber Risk teams, client vulnerability units, and DHS CDM PMO on reporting requirements and integration updates.
- Update vulnerability management SOPs, playbooks, and runbooks at least quarterly or when gaps or improvements are identified, with major revisions reviewed by the Change Control Board.
Benefits
- Company covers 99% of Medical, Dental, and Vision premiums for full-time employees.
- Employer contributes 25% toward health coverage for family members and dependents.
- Full-time employees receive fully paid Short Term Disability and Life Insurance policies.
- Certifications are 100% paid for by the company.
- 401K plan with employer match up to 4%.
- Paid Time Off provided to all eligible employees.
- Paid Federal Holidays observed annually.
- Wellness & Fitness Program available to support employee health.
- Access to Valiant University, an online learning and training platform.
- Flexible Spending Account (FSA) options for medical, dependent care, transit, and parking expenses.
- Employee referral bonuses offered for successful hires.
Work Arrangement
Remote (Worldwide)
Remote Work Policy
- Remote work is built on mutual trust and employee accountability.
- Telecommuting employees must maintain a quiet, distraction-free workspace with reliable internet, remain fully available during core business hours, and align schedules with team and client needs.
- Video cameras are encouraged and may be required during virtual meetings.
- Employees must disclose any current or planned outside employment and obtain prior written approval.
- Soliciting or conducting outside business during Valiant’s core business hours is prohibited.
Equal Employment Opportunity
- This company is an Equal Opportunity Employer.
- Employment decisions are made without regard to race, color, religion, sex, national origin, age, disability, genetic information, marital status, or veteran status, in compliance with applicable laws.
Authorization to Share Resume and Personal Information
- By submitting a resume, applicants authorize the company to share their resume and personal information with subsidiaries, affiliates, and teaming partners for consideration in this and similar roles requiring comparable skills and experience.
- If selected for pre-employment discussions, candidates will be asked to complete official employment applications and related documentation.
Other
- U.S. Citizenship is required due to federal contracting requirements.
- Ability to pass a federal background investigation is mandatory.
- Position operates fully remotely; requires a quiet, distraction-free workspace, stable internet, full attention, and availability during core business hours.
- Video cameras are encouraged and may be required during virtual meetings.
- Employees must disclose any outside employment engagements, current or future, and receive written approval.
- Employees are prohibited from soliciting or conducting outside business during core business hours.
- Physical demands include extended periods of sitting or standing, consistent computer use, frequent electronic communication, and occasional lifting of items under 20 pounds.
- Reasonable accommodations will be provided for individuals with disabilities.
