Source Job

• Lead the enterprise Vulnerability Management and CDM program, directing scanning and prioritization strategies.
• Coordinate remediation activities across system owners, engineering teams, and ISSOs to reduce cyber risk.
• Develop executive metrics, dashboards, and reports to communicate vulnerability posture and operational risk trends.

True Zero Technologies is a veteran-owned small business that focuses on purposeful enablement of people and technology. Recognized as a Best Places to Work in 2023 and 2025, and listed on the Inc. 5000 fastest-growing companies, the company emphasizes a people-first culture and dedication to excellence.

• Oversee the enterprise vulnerability management program, including administering Tenable platforms and conducting regular assessments.
• Monitor and respond to MDR alerts, investigate security incidents, and coordinate remediation efforts.
• Review and approve cybersecurity-related change requests, ensuring security risks are communicated and mitigated.

Loenbro is a trusted, long-term construction lifecycle partner serving thousands of customers across the U.S. They have a national presence with a local approach, and build careers grounded in integrity, teamwork, excellence, and purpose.

• Conduct and manage regular security vulnerability scans of IAM systems using industry-standard tools, analyzing results and developing remediation plans.
• Support federal compliance assessments including FISMA, A-123, BOD, and Safeguards reviews, developing corrective action plans and tracking remediation efforts.
• Maintain and update Plans of Action and Milestones (POA&M) in CSAM, monitor CDM scan results, and ensure adherence to NIST guidance and federal cybersecurity standards.

PingWind is an SBA certified Service-Disabled Veteran-Owned Small Business (SDVOSB) delivering cybersecurity, development, IT infrastructure, and professional services to the federal government. The company has offices in Northern Virginia and Huntsville, AL, with a focus on mission-critical programs.

• Lead complex Global Vulnerability Management workstreams to advance Threat Exposure Management capabilities and transition to a Continuous Threat Exposure Management model.
• Conduct hands-on vulnerability research, technical analysis, and security validation to eliminate false positives, characterize exploitability, and provide actionable remediation guidance.
• Partner across Information Security and engineering teams to evolve platforms, integrations, and automation for improved discovery, prioritization, and remediation outcomes.

Sony Interactive Entertainment (SIE) is the company behind the PlayStation brand, delivering innovative gaming hardware and network services to over 100 million people worldwide. As a subsidiary of Sony Group Corporation, SIE is a dynamic and entertainment-focused organization that values innovation, excellence, and employee empowerment.

• Oversee daily vulnerability identification, triage, and reporting across AWS cloud assets and AI/LLM application stacks.
• Leverage ACAS (Tenable.sc) and AWS security tools to evaluate threat vectors and ensure compliance with DISA STIG benchmarks.
• Translate complex technical findings into actionable remediation guidance and executive briefings for government stakeholders.

Dark Wolf is a cybersecurity firm specializing in vulnerability management and cloud security for federal and DoD systems. The company maintains a collaborative, mission-focused culture with a team of cybersecurity professionals.

• Manage vulnerability assessments across operating systems, containers, dependencies, and application environments.
• Perform vulnerability triage, validation, and proof-of-concept testing to determine real-world security impact.
• Collaborate with engineering teams to communicate risks and drive remediation efforts.

This company provides a large-scale software platform for AI and data science solutions, serving organizations with demanding compliance and risk requirements. It fosters a culture of innovation, transparency, and collaboration, with a growing security function and an inclusive workplace.

• Manage a novel vulnerabilities pipeline, owning measurement, disclosure, and reporting of thousands of vulnerabilities weekly.
• Coordinate across the industry with bodies like the Linux Foundation and CISA, and represent Chainguard externally.
• Guide industry direction and work with AI model vendors to evolve software supply chain security.

Chainguard is the trusted source for open source, delivering hardened, secure, and production-ready builds of open source software. The company is venture-backed by leading investors and serves Fortune 500 enterprises and global industry leaders.

• Lead vulnerability management and coordinate remediation across client environments.
• Support SOC 2 compliance, security monitoring, and incident response activities.
• Develop automation and scalable processes to improve security posture.

Atlas Technica shoulders IT management, user support, and cybersecurity for hedge funds and other investment firms. Founded in 2016, the company has grown through its uncompromising focus on service, values ownership and execution, and maintains a professional yet friendly global team.

• Analyze enterprise vulnerability data to identify the highest priority cyber exposures across the NIH environment.
• Correlate vulnerability findings with threat intelligence, exploit availability, and operational risk to improve remediation prioritization.
• Collaborate with incident responders, penetration testers, and security engineers to refine enterprise risk prioritization.

True Zero Technologies is a veteran-owned small business founded on the principle that enabling people and technology drives quality outcomes. We are a people-first company recognized as a Best Place to Work and on the Inc. 5000 list of fastest-growing companies.

• Assist in conducting cybersecurity assessments including vulnerability assessments, penetration testing, policy reviews, and social engineering engagements.
• Collaborate with team members to evaluate risks, recommend solutions, and support vulnerability management activities.
• Communicate technical cybersecurity concepts to both technical and non-technical audiences while managing multiple assignments concurrently.

Vantage Point Solutions is a customer-focused, technology-driven engineering and consulting firm serving the broadband, power, and financial industries. The company fosters a culture of teamwork, respect, and commitment.