Vulnerability Management Engineer

Job Description

Job Description

Overview

General Dynamics Mission Systems (GDMS) engineers a diverse portfolio of high technology solutions, products and services that enable customers to successfully execute missions across all domains of operation. With a global team of 12,000+ top professionals, we partner with the best in industry to expand the bounds of innovation in the defense and scientific arenas. Given the nature of our work and who we are, we value trust, honesty, alignment and transparency. We offer highly competitive benefits and pride ourselves in being a great place to work with a shared sense of purpose. You will also enjoy a flexible work environment where contributions are recognized and rewarded. If who we are and what we do resonates with you, we invite you to join our high-performance team!

Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans

Responsibilities

Bachelor's degree in Engineering, or a related Science or Mathematics field, plus a minimum of 5 years of relevant experience; or Master's degree plus a minimum of 3 years of relevant experience.

 

CLEARANCE REQUIREMENTS:
Department of Defense Secret security clearance obtainable within reasonable time based on requirements. Applicants selected will be subject to a U.S. Government security investigation and must meet eligibility requirements for access to classified information. Due to the nature of work performed within our facilities, U.S. citizenship is required.

Qualifications

Position Summary

Vulnerability Management Engineer; performs technical execution and coordination of vulnerability remediation and patch management activities across Windows, Linux and Cisco operating systems, network infrastructure, and security appliances within offline, air-gapped, and restricted-access environments.

 

Use Tenable Nessus and Tenable Security Center+ to analyze vulnerability findings, determine remediation requirements, develop device-to-patch mappings, coordinate patch testing, troubleshoot installation failures, and validate remediation effectiveness. Research vendor advisories, and manufacturer security releases to support timely and accurate remediation.

Coordinates patch qualification through designated integration and pre-production laboratory environments before preparing approved patch packages and deployment instructions for remote production implementation teams. Tracks remediation progress, evaluates deployment outcomes, maintains technical documentation, and produces status reports and compliance evidence to support cybersecurity risk reduction and operational readiness.

Works within established procedures and delegated authority, escalating complex technical issues, significant operational risks, and exceptions requiring senior-level review.

Key Responsibilities:

• Independently execute established patch testing procedures in the initial integration laboratory and final pre-production environment.
• Validate installation success, prerequisite compliance, service functionality, system stability, and compatibility with the target environment.
• Perform pre-installation and post-installation checks and document test results, errors, anomalies, and remediation steps.
• Troubleshoot routine and moderately complex patch installation failures and identify likely causes.
• Determine whether test results satisfy established acceptance criteria and prepare evidence-based recommendations for release or further investigation.
• Identify patches that require additional testing, revised installation instructions, or coordination with system owners.
• Maintain, and refine standard operating procedures, patching work instructions, troubleshooting guides, and validation checklists.
• Develop or modify scripts and utilities to improve repetitive patching, data collection, validation, reporting, and remediation tracking tasks, where authorized.
• Identify opportunities to improve vulnerability data quality, reduce manual tracking effort, standardize deployment evidence, and increase operational efficiency.
• Recommend updates to patch qualification procedures based on observed failures, recurring vulnerabilities, and laboratory or production feedback.
• Provide technical guidance to junior team members on established procedures, documentation standards, and routine troubleshooting.
• Share lessons learned and contribute to continuous improvement of the vulnerability remediation lifecycle.

 

Required Skills and Experiences:

• Working knowledge of vulnerability management, patch management (manual and automated), and security remediation processes.
• Practical experience interpreting Nessus findings and correlating vulnerabilities with applicable remediation guidance.
• Working knowledge of Windows, Linux and Cisco patch installation, system administration, and troubleshooting.
• Ability to independently execute established technical procedures and resolve routine to moderately complex technical issues.
• Understanding of patch prerequisites, dependencies, testing requirements, and post-installation validation.
• Ability to compare pre-remediation and post-remediation scan results and document remediation effectiveness.
• Experience maintaining technical records, remediation tracking data, installation logs, and compliance evidence.
• Ability to prepare technical reports and communicate findings to technical personnel and management.
• Ability to work effectively with remote teams in controlled, restricted-access, or disconnected environments.
• Hold or have held CySA+
• Experience with bash, PowerShell, and Batch scripting
• Hold or have held Linux+ or LPIC-1 or RHCSA or RHCSE
• Intermediate Excel skills (Tables, PivotTables, Power Query, PowerPivot, Slicers)
• Intermediate Word skills (References, Review Tabs)
• Experience with Solaris SPARC operating systems

 

Preferred Skills and Experiences:

• Experience updating Cisco Firewalls, Switches, and Routers
• Experience with the setup Windows Server Update Services (WSUS)
• Microsoft Configuration Manager (ConfigMgr / MECM / SCCM)
• Use of Red Hat Satellite
• Use of setup of Ansible Automation
• Experience with the setup of a WinGet Server
• Experience with the setup of RHEL Repo mirror
• Working knowledge of IBM ClearQuest
• Working knowledge of IBM ClearCase
• Basic working of knowledge relational databases (relationship types and basic querying)
• Working knowledge of Plan of Actions and Milestones (POA&M / POAM)

#LI-Hybrid