Senior Technical Support Specialist

If you are a current State of Maine employee, please submit your application through the internal application process using the Find Jobs report in PRISM. Seasonal employees who do not have PRISM access should apply through the State’s career page and indicate on the application that they have previously worked for the State. Office of Information Technology Opening Date: October 20, 2026 Closing Date: November 3, 2026 Grade / Admin Unit: 29 / Professional/Technical Job Class Code: 0871 Salary: $74,845.68 - $105,056.22*/Annually (*Includes a 15% recruitment and retention stipend) Position Number: 004250736 Location: Augusta Telework: Partial telework options are available after 3 months, with management approval Currently, this position is not eligible for visa sponsorship or STEM OPT extensions.

DESCRIPTION

As the Vulnerability Management Team Lead, you’ll provide operational leadership, technical direction, and program oversight for the Information Security Office’s enterprise Vulnerability Management and Application Testing program. This role offers the opportunity to guide vulnerability identification, validation, prioritization, remediation coordination, application security testing, reporting, metrics development, and continuous improvement across State systems, applications, cloud services, network environments, and enterprise technology assets. You’ll work closely with SOC leadership, ISO teams, skilled contractor personnel, application teams, infrastructure teams, agency stakeholders, vendors, service providers, and leadership to improve enterprise visibility into cybersecurity risk. The position supports vulnerability scanning, application testing, limited penetration testing, remediation tracking, secure software development practices, dashboarding, metrics, reporting, and program documentation. This position also plays a key role in coordinating assigned program resources, advising leadership, supporting risk-informed decision-making, guiding remediation priorities, and ensuring vulnerability management and application testing activities align with ISO priorities and statewide cybersecurity needs. We are seeking a highly talented individual who will represent our C.A.R.E. values in all that they do. At MaineIT we: Practice Customer-focus , ensuring that our customers areheard,and their needs are met Hold ourselves to a high level of Accountability by being transparent with our stakeholders Maintain an effective level of Responsiveness by providing timely updates in a proactive manner Strive to provide Empathy-driven , people-focused services by applying emotional intelligence skills and behaviors

WHAT YOU'LL DO

No two days look quite the same in MaineIT’s Information Security Office. In general, you can expect to: Lead Vulnerability Management Operations: Assign and prioritize work, coordinate daily operational coverage, conduct follow-up, guide skilled contractor personnel, support program readiness, and help ensure vulnerability management and application testing work is completed accurately, consistently, and timely. Oversee the Enterprise Vulnerability Management Program: Lead vulnerability identification, scanning coverage, validation, prioritization, remediation tracking, exception review preparation, and reporting across State systems, applications, cloud services, network environments, and enterprise technology assets. Lead Application Security Testing: Coordinate testing intake, testing activities, analysis, validation, documentation, and communication of application vulnerabilities, including support for secure software development practices and remediation recommendations. Administer Security Testing Platforms: Configure, maintain, tune, and improve vulnerability management and application testing platforms to support reliable scanning, accurate results, effective reporting, data aggregation, workflow management, and operational visibility. Develop Reporting and Metrics: Build and maintain dashboards, KPIs, KRIs, reports, templates, executive summaries, operational briefings, and trend analysis materials that support risk-informed decision-making and program accountability. Coordinate Remediation Activities: Work with application teams, infrastructure teams, agency stakeholders, vendors, and service providers to communicate findings, clarify risk, track remediation progress, resolve capability gaps, and elevate unresolved or high-risk issues. Support Security Analysis and Testing: Conduct and coordinate limited penetration testing, vulnerability validation, root-cause review, and technical analysis to identify infrastructure, application, configuration, and process weaknesses. Provide Technical Guidance: Advise the Security Operations Center Manager, ISO leadership, technical teams, vendors, service providers, and stakeholders regarding vulnerability management, application testing, remediation priorities, tool use, operational risks, and program improvements. Support Security Initiatives and Projects: Participate in stakeholder meetings; analyze technical and operational requirements; contribute to secure software development improvements; develop metrics; produce reports; and deliver briefings or presentations to support informed decision-making. Maintain Program Documentation: Develop, document, and maintain standard operating procedures, testing procedures, remediation workflows, vulnerability management playbooks, knowledge articles, workflow diagrams, and supporting operational documentation. Support Training and Knowledge Sharing: Provide training, mentoring, and instructional materials on vulnerability review, application testing, security tooling, remediation processes, and response procedures to improve readiness, consistency, and response effectiveness.

WHY THIS ROLE STANDS OUT

As a cybersecurity professional, you have a lot of options when it #J-18808-Ljbffr MaineGuide