Vulnerability Engineer

Job Description

Everforth ECS is seeking an experienced Vulnerability Engineer to join an enterprise-scale cybersecurity program supporting a major federal civilian agency. This position supports remote work, with preference given to candidates residing in or near the National Capital Region (NCR).

In this role, you will engineer, implement, integrate, and optimize enterprise vulnerability management capabilities across complex on-premises, cloud, and hybrid environments. You will collaborate with cybersecurity architects, security engineers, system administrators, vulnerability analysts, and government stakeholders to improve vulnerability discovery, strengthen assessment coverage, automate security processes, and support effective remediation of exploitable weaknesses. Your technical expertise will help modernize vulnerability management operations, improve enterprise security visibility, and reduce cybersecurity risks affecting mission-critical federal systems and services.

Please Note: This position is contingent upon contract award.

Salary Range: $220,000 - $250,000

Position Responsibilities

• Engineer, configure, deploy, maintain, and optimize enterprise vulnerability scanning and assessment platforms across networks, endpoints, servers, applications, and cloud environments.
• Develop and maintain vulnerability assessment architectures, scanning configurations, credentialed assessment capabilities, and supporting integrations to ensure comprehensive enterprise coverage.
• Implement vulnerability assessment capabilities across Microsoft Azure, AWS, cloud-native infrastructure, containers, and hybrid environments.
• Design and optimize scanning schedules, assessment policies, discovery methods, and technical configurations to improve vulnerability detection while minimizing operational impacts.
• Integrate vulnerability management platforms with asset inventories, configuration management databases, SIEM platforms, ticketing systems, and other enterprise cybersecurity technologies.
• Develop scripts, APIs, automated workflows, and technical solutions that improve vulnerability discovery, data enrichment, prioritization, remediation tracking, and reporting.
• Conduct advanced technical analysis of vulnerabilities, insecure configurations, exposed services, and potential attack paths to validate findings and identify effective remediation approaches.
• Collaborate with system owners, infrastructure engineers, and application teams to develop, test, and implement technical remediation solutions that address identified vulnerabilities.
• Engineer risk-based vulnerability management capabilities that incorporate threat intelligence, known exploitation activity, asset criticality, and technical exposure information.
• Develop technical dashboards, automated reports, and assessment coverage metrics to measure vulnerability exposure, scanning effectiveness, remediation performance, and program maturity.
• Support the secure integration and assessment of emerging technologies, including cloud-native services, AI-enabled applications, APIs, and automated infrastructure deployments.
• Develop technical standards, configuration baselines, engineering documentation, and operating procedures while providing technical guidance and escalation support for complex vulnerability management challenges.

Required Skills

• U.S. Citizenship required.
• Remote position, with preference for candidates residing within close proximity to the National Capital Region (NCR).
• Active Public Trust 6C determination, or the ability to obtain and maintain the required determination.
• Bachelor Degree and 16 years of experience, Master's Degree and 14+ years of experience or a Phd and 10+ years of experience in Cybersecurity, Computer Science, Information Technology, Engineering, or a related field (or equivalent professional experience).
• 5-7 years of relevant experience in vulnerability engineering, cybersecurity engineering, vulnerability management, security infrastructure, or related technical cybersecurity disciplines.
• Demonstrated hands-on experience engineering, deploying, configuring, and maintaining enterprise vulnerability assessment and management technologies.
• Strong technical experience with vulnerability management platforms such as Tenable, Qualys, Rapid7, or comparable enterprise solutions, including scan configuration, assessment coverage, and platform optimization.
• Experience securing and assessing enterprise infrastructure across Windows, Linux, network devices, and Microsoft Azure, AWS, or comparable cloud environments.
• Proficiency with scripting, automation, APIs, and system integration using technologies such as Python, PowerShell, Bash, or comparable tools.
• Strong understanding of vulnerability management methodologies, CVSS, CVEs, CISA KEV, vulnerability remediation, and risk-based prioritization.
• Working knowledge of federal cybersecurity requirements, including NIST SP 800-53, NIST SP 800-40, the NIST Risk Management Framework (RMF), and applicable CISA directives.
• Strong technical troubleshooting, analytical, documentation, and communication skills, with the ability to resolve complex engineering challenges and collaborate across cybersecurity and infrastructure teams.

Desired Skills

• Experience engineering enterprise vulnerability management capabilities within federal civilian agencies or large-scale cybersecurity programs.
• Advanced experience deploying and integrating vulnerability assessment technologies across multi-cloud, hybrid, containerized, and Kubernetes environments.
• Experience integrating vulnerability management platforms with asset intelligence solutions such as Axonius, SIEM platforms such as Splunk, and enterprise IT service management technologies.
• Experience implementing risk-based vulnerability management, exposure management, attack surface management, and automated remediation workflows.
• Familiarity with infrastructure-as-code, DevSecOps, CI/CD pipelines, and automated security testing using tools such as Terraform, Ansible, or comparable technologies.
• Experience developing technical approaches for assessing vulnerabilities in AI-enabled applications, machine learning infrastructure, APIs, and cloud-native services.
• Experience using security analytics, automation, and AI-assisted capabilities to improve vulnerability correlation, prioritization, and remediation efficiency.
• Relevant certifications such as CISSP, GIAC GSEC, CompTIA CySA+, AWS Certified Security - Specialty, Microsoft Certified: Azure Security Engineer Associate, or comparable advanced cybersecurity engineering credentials.

ECS Federal LLC is an equal opportunity employer and does not discriminate or allow discrimination on the basis any characteristic protected by law. All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, or local jurisdiction law.

Everforth ECS is the federal segment of Everforth, a $4B global organization with over 10,000 employees. Our nearly 3,500 professionals deliver advanced technology solutions in data and AI, cybersecurity, and enterprise transformation, serving defense, intelligence, and federal civilian agencies.

Our work powers mission-critical outcomes, strengthens technology partnerships, and creates meaningful opportunities for our people. We are defined by a commitment to excellence in delivery, a culture of innovation, and an environment where talent can thrive and grow.

We value:

• Attracting and developing top talent and high-performing teams
• Fostering a culture that is engaging, accountable, and mission-driven

Meet the challenge. Make a difference with Everforth ECS!