Vulnerability Management Engineer - Digital Global Connectors

Vulnerability Management Engineer

Location: Bethesda, MD (Hybrid; On-site as Required)

Clearance: Tier 2 Public Trust (Required)

Employment Type: Full-Time

Position Summary

Digital Global Connectors (DGC) is seeking an experienced Vulnerability Management Engineer to support a Federal information security program. The Vulnerability Management Engineer is responsible for identifying, assessing, prioritizing, tracking, and supporting the remediation of security vulnerabilities across enterprise information systems, cloud environments, applications, databases, network infrastructure, and endpoint devices.

This position performs enterprise vulnerability assessments, validates remediation efforts, supports continuous monitoring activities, and works closely with Security Engineers, ISSOs, System Administrators, Cloud Engineers, Security Operations Center (SOC) personnel, and program leadership to reduce organizational cyber risk and strengthen the overall cybersecurity posture.

The successful candidate will possess extensive experience administering enterprise vulnerability management platforms, performing technical vulnerability assessments, and implementing risk-based remediation strategies within large enterprise environments.

Essential Duties and Responsibilities:

Enterprise Vulnerability Assessments

• Conduct enterprise vulnerability assessments across servers, workstations, databases, network infrastructure, cloud environments, applications, and endpoint devices.
• Perform authenticated and unauthenticated vulnerability scans.
• Analyze vulnerability assessment results to determine severity and organizational impact.
• Validate scan accuracy and eliminate false positives.
• Identify systemic security weaknesses and recurring vulnerabilities.
• Maintain vulnerability assessment schedules supporting continuous monitoring activities.

Vulnerability Management

• Prioritize vulnerabilities using risk-based methodologies.
• Coordinate remediation activities with System Administrators, Cloud Engineers, Security Engineers, and System Owners.
• Track remediation progress through completion.
• Validate successful remediation of identified vulnerabilities.
• Recommend mitigation strategies when immediate remediation is not feasible.
• Monitor aging vulnerabilities and escalation thresholds.

Security Configuration Compliance

• Assess compliance with DISA Security Technical Implementation Guides (STIGs), CIS Benchmarks, Microsoft Security Baselines, and organizational configuration standards.
• Identify configuration weaknesses affecting system security.
• Recommend secure configuration improvements.
• Validate implementation of security hardening recommendations.
• Support configuration compliance reporting.