Cybersecurity Lead-Vulnerability management at NTT DATA Services

Job description

Req ID: 390742 NTT DATA strives to hire exceptional, innovative and passionate individuals who want to grow with us. If you want to be part of an inclusive, adaptable, and forward-thinking organization, apply now. We are currently seeking a Cybersecurity Lead-Vulnerability management to join our team in Arlington, Virginia (US-VA), United States (US). Job Summary: The Senior Vulnerability Management Lead provides technical leadership and hands‑on expertise to secure federal information systems in accordance with NIST Risk Management Framework (RMF), FISMA, HIPAA, and agency‑specific requirements. This role oversees vulnerability management operations, leads incident response planning and execution, and ensures continuous security compliance to support Authorization to Operate (ATO) maintenance. Working closely with cross‑functional IT teams, the Team Lead strengthens cybersecurity posture through proactive threat mitigation, audit readiness, and the implementation of enterprise security controls. Responsibilities • Lead full lifecycle NIST RMF activities, including categorization, control implementation, security assessment, POA&M management, and ATO sustainment. • Ensure compliance with federal security standards such as FISMA, HIPAA, and agency‑specific security policies. • Coordinate with assessment and authorization stakeholders to maintain documentation, respond to findings, and support audits and system reviews. • Review scan results, validate findings, determine criticality, and coordinate remediation with system owners and operations teams. • Develop and maintain processes for continuous monitoring, risk scoring, and reporting to leadership. • Integrate threat intelligence platforms to identify emerging risks and drive proactive mitigation strategies. • Support security audits, penetration tests, and secure configuration enforcement. • Lead coordination with internal security teams, IT operations, legal/compliance, and government stakeholders to ensure proper handling, documentation, and reporting. • Conduct post‑incident reviews and improve incident response plans and playbooks. • Guide the implementation and maintenance of security controls across infrastructure, applications, and cloud environments. • Provide expertise in secure architecture, configuration management, identity and access management, and audit log review. • Analyze system changes for security impacts and support change control processes. • Drive continuous improvement, standardization, and security optimization across the program. • Supervise cybersecurity engineers and specialists, providing mentorship, task direction, and performance oversight. • Facilitate collaboration with network, server, cloud, and application teams to ensure timely vulnerability remediation and control implementation. • Support program‑level coordination activities, including reporting, stakeholder briefings, and cross‑team integration efforts. Qualifications • Masters Degree, One-and-one- half (1.5) years of additional experience can substitute for one (1) year of a typical degree program. • Minimum 10 years’ experience performing the cybersecurity and team lead tasks/responsibilities listed above • Ability to obtain and maintain a public trust clearance • Hybrid role requiring 4 days onsite in Arlington, VA. Preferred Skills • Extensive experience with NIST RMF in federal environments. • Hands‑on knowledge of vulnerability scanning tools (e.g., Nessus), SIEM platforms, and security automation. • Oversee enterprise vulnerability scanning operations using tools such as Nessus and agency‑approved scanners. • Use enterprise security tools (e.g., SIEM platforms, endpoint protection, IDS/IPS) to monitor events and support investigations. • Experience leading cybersecurity teams and coordinating with multidisciplinary IT groups. • Strong understanding of federal cybersecurity mandates (FISMA, HIPAA, and agency policies). • Experience with incident response planning, execution, and reporting. • Ability to interpret threat intelligence and translate it into actionable risk mitigation. • Ability to manage multiple requests and deadlines in a fast‑paced environment. • CISSP, CISM, CEH, Security+, or equivalent certifications. • Experience supporting federal law enforcement, DoD, DHS, or DOJ programs. • Familiarity with compliance auditing tools and enterprise monitoring solutions. NTT DATA provides a reasonable range of compensation for specific roles. The starting pay range for this remote role is $103,275 - $210,000. This range reflects the minimum and maximum target compensation for the position across all US locations. Actual compensation will depend on a number of factors, including the candidate’s actual work location, relevant experience, technical skills, and other qualifications. This position may also be eligible for incentive compensation based on individual and/or company performance. If the position offered in temporary, the position will not be eligible for incentive compensation. This position is eligible for company benefits including medical, dental, and vision insurance with an employer contribution, flexible spending or health savings account, life and AD&D insurance, short and long term disability coverage, paid time off, employee assistance, participation in a 401k program with company match, and additional voluntary or legally-required benefits. #LI-NorthAmerica About NTT DATA NTT DATA is a $30 billion business and technology services leader, serving 75% of the Fortune Global 100. We are committed to accelerating client success and positively impacting society through responsible innovation. We are one of the world's leading AI and digital infrastructure providers, with unmatched capabilities in enterprise-scale AI, cloud, security, connectivity, data centers and application services. our consulting and Industry solutions help organizations and society move confidently and sustainably into the digital future. As a Global Top Employer, we have experts in more than 50 countries. We also offer clients access to a robust ecosystem of innovation centers as well as established and start-up partners. NTT DATA is a part of NTT Group, which invests over $3 billion each year in R&D. Whenever possible, we hire locally to NTT DATA offices or client sites. This ensures we can provide timely and effective support tailored to each client’s needs. While many positions offer remote or hybrid work options, these arrangements are subject to change based on client requirements. For employees near an NTT DATA office or client site, in-office attendance may be required for meetings or events, depending on business needs. At NTT DATA, we are committed to staying flexible and meeting the evolving needs of both our clients and employees. NTT DATA recruiters will never ask for payment or banking information and will only use @nttdata.com, @nttdatafed.com and @talent.nttdataservices.com email addresses. If you are requested to provide payment or disclose banking information, please submit a contact us form, us.nttdata.com . NTT DATA endeavors to make us.nttdata.com accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact us at us.nttdata.com . This contact information is for accommodation requests only and cannot be used to inquire about the status of applications. NTT DATA is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status. For our EEO Policy Statement, please click here . If you'd like more information on your EEO rights under the law, please click here . For Pay Transparency information, please click here .

Requirements

Must-haves

Req ID: 390742
NTT DATA strives to hire exceptional, innovative and passionate individuals who want to grow with us. If you want to be part of an inclusive, adaptable, and forward-thinking organization, apply now.
We are currently seeking a Cybersecurity Lead-Vulnerability management to join our team in Arlington, Virginia (US-VA), United States (US).
Lead full lifecycle NIST RMF activities, including categorization, control implementation, security assessment, POA&M management, and ATO sustainment.
Ensure compliance with federal security standards such as FISMA, HIPAA, and agency‑specific security policies.
Coordinate with assessment and authorization stakeholders to maintain documentation, respond to findings, and support audits and system reviews.
Review scan results, validate findings, determine criticality, and coordinate remediation with system owners and operations teams.
Develop and maintain processes for continuous monitoring, risk scoring, and reporting to leadership.
Integrate threat intelligence platforms to identify emerging risks and drive proactive mitigation strategies.
Support security audits, penetration tests, and secure configuration enforcement.
Lead coordination with internal security teams, IT operations, legal/compliance, and government stakeholders to ensure proper handling, documentation, and reporting.
Conduct post‑incident reviews and improve incident response plans and playbooks.

Nice-to-haves

Extensive experience with NIST RMF in federal environments.
Hands‑on knowledge of vulnerability scanning tools (e.g., Nessus), SIEM platforms, and security automation.
Oversee enterprise vulnerability scanning operations using tools such as Nessus and agency‑approved scanners.
Use enterprise security tools (e.g., SIEM platforms, endpoint protection, IDS/IPS) to monitor events and support investigations.
Experience leading cybersecurity teams and coordinating with multidisciplinary IT groups.
Strong understanding of federal cybersecurity mandates (FISMA, HIPAA, and agency policies).
Experience with incident response planning, execution, and reporting.
Ability to interpret threat intelligence and translate it into actionable risk mitigation.
Ability to manage multiple requests and deadlines in a fast‑paced environment.
CISSP, CISM, CEH, Security+, or equivalent certifications.
Experience supporting federal law enforcement, DoD, DHS, or DOJ programs.
Familiarity with compliance auditing tools and enterprise monitoring solutions.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

aiaccessibility

Platform: successfactors
Effort: medium

Benefits

Benefits detected in the listing.

Dental

Vision

401k

Paid Time Off