Senior Manager, Vulnerability Management

Responsibilities

Peraton is seeking a Senior Manager, Vulnerability Management to serve as the technical and operational lead for enterprise vulnerability management across a multi-tenant Data Center environment supporting 30+ tenant systems and multiple General Support Systems (GSS). This role is responsible for directing vulnerability identification, analysis, prioritization, and remediation coordination across Windows, RedHat Linux, hybrid-cloud, database, and API platforms.

 

The ideal candidate acts as the central authority for translating federal vulnerability and cyber directives into actionable technical remediation plans and leads cross-functional response efforts for critical and zero-day threats. This position partners closely with security, infrastructure, operations, and tenant stakeholders to drive compliance, reduce enterprise risk, and improve remediation performance metrics.

 

Key Responsibilities:

 

Vulnerability & Compliance Leadership

• Serve as primary technical lead for vulnerability management across Data Center GSS and tenant environments.
• Review and interpret federal vulnerability directives and alerts and translate them into actionable remediation requirements.
• Direct enterprise response to emerging threats and zero-day vulnerabilities, including impact assessments and coordinated remediation actions.
• Oversee asset risk classification and vulnerability tracking across multi-tenant systems.
• Ensure alignment with federal security mandates and system hardening standards and required remediation timelines.

Technical Analysis & Remediation Oversight

• Lead analysis and validation of vulnerability scan results, including false-positive review and risk prioritization.
• Direct remediation strategies across Windows Server, RedHat Enterprise Linux (RHEL), hybrid cloud, database, and API platforms.
• Oversee vulnerability mitigation aligned to DISA STIGs and enterprise configuration baselines.
• Guide remediation planning where immediate fixes are not feasible, including mitigation strategies and risk documentation.
• Ensure teams apply risk-based prioritization and remediation sequencing.

Operations & Stakeholder Coordination

• Lead recurring vulnerability remediation and status reviews with ISSOs and operations teams.
• Serve as senior technical liaison to system owners and tenant stakeholders regarding risk posture and compliance requirements.
• Coordinate across infrastructure, engineering, and platform teams to remove remediation blockers.
• Provide technical guidance and decision support during high-severity vulnerability and zero-day events.

Reporting & Metrics

• Direct development of executive dashboards and detailed technical vulnerability reports.
• Track and improve key metrics such as remediation timelines and compliance rates.
• Ensure accuracy and timeliness of high-priority vulnerability and threat reporting.
• Present vulnerability posture and remediation progress to leadership and customer stakeholders.

Qualifications

Basic Qualifications:

 

• Minimum 12 years of experience, may have supervisory or management experience
• Minimum 5+ years in a technical leadership or management role overseeing vulnerability remediation or enterprise security operations.
• Demonstrated experience leading vulnerability management programs in data center or large enterprise environments.
• Must have extensive IT and cybersecurity experience, including vulnerability management, infrastructure security, or platform security operations.
• Hands-on experience with enterprise vulnerability scanning and assessment tools (e.g., Tenable, Nessus, or similar).
• Advanced technical knowledge of Windows Server and RedHat Enterprise Linux security and administration.
• Experience applying system hardening standards and security configuration baselines.
• Experience analyzing vulnerability data and prioritizing remediation using risk-based scoring methodologies.
• Experience coordinating cross-team remediation efforts across infrastructure, platform, and application teams.
• Experience developing technical and executive-level security reports and dashboards.
• Certification Required: active Certified Information Systems Security Professional (CISSP)
• U.S. Citizenship required; must be able to obtain and maintain a DHS Entry on Duty (EOD) clearance.

Preferred Qualifications:

 

• Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, or related field.
• Maste