You will support the client’s Vulnerability and Patch Management managed service to ensure the security and integrity of enterprise assets. Your role involves managing authorized scan profiles, reconciling inventory, validating findings, and coordinating actionable remediation queues across various agencies.
Mission
This position supports a client's Vulnerability and Patch Management managed service within federal agencies. The role ensures security and integrity of enterprise assets through disciplined vulnerability operations, change control, and cross-agency stakeholder coordination.
About this role
About this opening: this is a permanent position employed by Reveald, and it depends on Reveald winning the contract it is bidding for. No security clearance is required. To be confirmed: salary (depends on experience), location, work arrangement and onsite days, on-call expectations, number of hires and start date.
You will support the client’s Vulnerability and Patch Management managed service to ensure the security and integrity of enterprise assets. Your role involves managing authorized scan profiles, reconciling inventory, validating findings, and coordinating actionable remediation queues across various agencies.
What you'll do
• Manage enterprise vulnerability scanning operations, including addressing scan failures and identifying false positives.
• Perform finding validation and contextual prioritization to ensure critical risks are addressed efficiently.
• Follow disciplined change control, troubleshoot technical issues, and document all actions within an auditable case history.
• Produce clear runbooks and provide evidence of remediation to agency stakeholders, CSMs, and testing teams.
• Coordinate with asset owners and vendors to reconcile manual case queues and ensure authorized closure of vulnerabilities.
• Support agreed service windows, maintenance schedules, and critical on-call responsibilities.
• Identify and escalate operational risks or areas requiring specialist support to ensure data protection and safety.
What you bring
• Three or more years of experience in enterprise vulnerability operations with a focus on safe scan management.
• Proven production experience in managing technology lanes, including asset and application owner collaboration.
• Ability to analyze complex findings, identify affected services, and recognize dependencies or missing evidence.
• Experience in change and recovery, including the ability to manage failed remediations and execute rollback procedures.
• Strong communication skills to handle unresponsive owners, manage cross-agency conflicts, and document escalation decisions.
• Technical proficiency in distinguishing successful software installation from validated remediation and functional acceptance.
• Readiness to provide a detailed skills matrix demonstrating lead or execution capabilities in specific technical lanes with recent evidence.
Required skills
- Vulnerability scanning
- Tenable
- Qualys
- Rapid7
- False positive analysis
- Vulnerability prioritization
- Asset inventory reconciliation