Vulnerability Assessment Team Lead

Description Tyto Athene is searching for a Vulnerability Assessment Team (VAT) Analyst Lead to support a law enforcement customer in Ashburn, VA. In this role, you will work closely with threat hunters, threat analysts, and an established SOC playing a critical part in identifying, assessing, and mitigating vulnerabilities as we hunt down and defend against the most advanced global threats. Responsibilities Lead enterprise vulnerability assessment efforts and security testing activities. Perform vulnerability scanning and analysis across complex networks and systems. Provide clear, actionable remediation guidance and track remediation efforts to completion. Support the development, implementation, and maintenance of enterprise vulnerability management services and processes. Operate, configure, and optimize agency tools and technologies used for vulnerability testing, scanning, and threat identification. Review and update vulnerability management plans, policies, and documentation. Coordinate scanning schedules, scope, and requirements with stakeholders and system owners. Review, analyze, validate, and report vulnerability scan results and findings. Maintain a repository of vulnerability assessment tool and application issues; report issues to the Government VAT Team Lead and SSD Director. Apply Information Systems Security principles and relevant security methodologies across the vulnerability lifecycle. Assist with Application Security efforts, including secure configuration and vulnerability testing. Leverage understanding of Firewall Management and Advanced Threat Protection solutions. Apply expertise related to Access Control, Authorization, IDS/IPS, and protocol analysis. Ensure proper handling of sensitive and classified information protocol requirements. Ensure compliance with FISMA, NIST, and Risk Management Framework (RMF) standards. Qualifications Required: Minimum 5 years of experience performing enterprise vulnerability assessments. Strong background analyzing vulnerabilities and providing remediation instructions. Experience operating vulnerability scanning platforms and assessment tools. Knowledge of Application Security concepts and secure system implementation. Understanding of Firewall Management, AT&P tools, access control, IDS/IPS, and protocol analysis. Familiarity with classified information handling requirements. Experience working in compliance‑driven environments (FISMA, RMF, NIST). Strong analytical, communication, and reporting skills. Desired: CISSP - Certified Information Systems Security Professional Certified Ethical Hacker (CEH) or one of the following: DoD 8570 IAT Level II or IAM Level I or CSSP Analyst / Incident Responder GCFA - GIAC Certified Forensic Analyst GCFE - GIAC Certified Forensic Examiner GREM - GIAC Reverse Engineering Malware GNFA - GIAC Network Forensic Analyst Benefits Health/Dental/Vision 401(k) match Paid Time Off STD/LTD/Life Insurance Referral Bonuses Professional development reimbursement Parental leave About Tyto Athene Tyto Athene is a trusted leader in IT services and solutions, delivering mission‑focused digital transformation that drives measurable success. Our expertise spans four core technology domains—Network Modernization, Hybrid Cloud, Cybersecurity, and Enterprise IT—empowering our clients with cutting‑edge solutions tailored to their evolving needs. With over 50 years of experience, Tyto Athene proudly supports Defense, Intelligence, Space, National Security, Civilian, Health, and Public Safety clients across the United States and worldwide. Are you ready to join #TeamTyto? Location & Clearance Location: Ashburn, VA Clearance: TS/SCI Clearance required Tyto Athene, LLC is an Equal Opportunity Employer; all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any characteristic protected by applicable law. #J-18808-Ljbffr