Security Engineer - Vulnerability Manager

osition Type: Onsite

Location: 1200 New Jersey Avenue, Washington, DC 20590, USA (DOT Headquarters)

Work Authorization: U.S. Citizen or Green Card Holder with a minimum of 3 years U.S. residency

Security Clearance: Public Trust (required prior to start)

Duration: 07/06/2026 – 08/24/2026

Potential for Conversion: Yes

Schedule: 8 hours/day, 40 hours/week

Program: DOT

Prime Contractor: SAIC

Role Summar

yThe Security Engineer – Vulnerability Management will support the Department of Transportation's cybersecurity mission by identifying, assessing, tracking, and coordinating remediation of vulnerabilities across enterprise systems and infrastructure.

This role works closely with federal leadership, system administrators, and cybersecurity teams to improve DOT's overall security posture and ensure compliance with federal cybersecurity standards and frameworks

.

Key Responsibiliti

• esPerform endpoint vulnerability management activities across DOT enterprise environment
• s.Utilize vulnerability scanning platforms, specifically Tenable Nessus, to identify and assess security risk
• s.Coordinate remediation activities with system owners, application teams, and infrastructure administrators to meet required remediation timeline
• s.Develop and maintain vulnerability tracking, reporting, and metrics dashboard
• s.Present vulnerability trends, remediation status, and cyber risk findings to federal leadership and stakeholder
• s.Troubleshoot issues related to endpoint vulnerability scanning and reportin
• g.Manage cybersecurity-related ITSM tickets within ServiceNow through resolutio
• n.Participate in Cybersecurity and Security Operations (SecOps) meetings and initiative
• s.Collaborate with cross-functional teams to improve DOT cybersecurity solutions and processe
• s.Provide guidance and education regarding vulnerability management concepts to technical and non-technical stakeholder

s.

Required Technical Ski

• llsMinimum of 6 years of experience in Cybersecurity or related Information Technology fiel
• ds.Experience with endpoint vulnerability scanning solutions, specifically Tenable Ness
• us.Strong experience
• in:Vulnerability management lifecy
• cleRisk assessment and mitigat
• ionRemediation planning and execut
• ionExperience with federal cybersecurity requirements and standards includi
• ng:FI
• SMANIST 800 Ser
• iesNIST Risk Management Framework (R
• MF)NIST Cybersecurity Framework (C
• SF)Experience using ITSM platforms such as ServiceN
• ow.Knowledge
• of:Operating syst
• emsDataba
• sesNetwork
• ingFirewa
• llsCloud-based syst
• emsData Loss Prevention (D
• LP)Endpoint Security soluti
• onsIDS/IPS technolog
• iesHost-based security technolog
• iesAbility to develop vulnerability reports, dashboards, and risk metri
• cs.Strong collaboration and communication skills across technical and business tea

ms.

Preferred / Nice-to-Have Sk

• illsSecurity certifications such
• as:Secur
• ity+C
• ISSP
• CISM
• CISA
• GCIH
• OSC
• PCEHExperience supporting federal agencies and government cybersecurity progr
• ams.Experience presenting cybersecurity findings to executive leaders
• hip.Familiarity with cloud security practices and hybrid infrastructure environme

nts.

Qualifications & Exper

• ienceBachelor's degree with 5+ years of cybersecurity experienc
• e; orMaster's degree with 4+ years of cybersecurity experienc
• e; orEquivalent combination of education and experience totaling at least 6 years in cybersecurity or related IT discipl
• ines.Candidate must be eligible to obtain and maintain a Public Trust clearance prior to star
• ting.Candidate must be a U.S. Citizen or Green Card Holder who has resided in the United States for at least three y

ears.

About the Team / C

ompanyThis position supports the Department of Transportation's cybersecurity mission focused on protecting information systems that support critical national infrastructure including highways, bridges, roads, and transportation sy

stems.