> Markdown version of [/jobs/ext/3833285-it-security-vulnerability-specialist-0036](https://www.wearedevelopers.com/jobs/ext/3833285-it-security-vulnerability-specialist-0036). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# IT Security Vulnerability Specialist (0036)

- **Company:** OCT Consulting LLC
- **Location:** Suitland-Silver Hill, MD, United States
- **Experience:** Expert
- **Salary:** $110,000.0 - $130,000.0
- **Contract:** Permanent contract
- **Skills:** Microsoft Excel, Software Applications, Configuration Management, Code Review, Cyber Security, Information Leak Prevention, Multi-Factor Authentication, Intrusion Detection and Prevention, Firewall Policy Management, Software Vulnerability Management, Software Security, Web Filtering, SC Clearance, CIS Benchmarks, Vulnerability Analysis
- **Published:** October 19, 2026
- **Apply:** https://www.thejobnetwork.com/job/a56b15e1-7daa-4474-8c58-4416ac8e280f/it-security-vulnerability-specialist-

## About the Role

The ideal candidate will be proficient in key areas of security such as: Vulnerability Management, Intrusion Prevention and Detection, Access Control and Authorization, Policy Enforcement, Application Security, Protocol Analysis, Firewall Management, Incident Response, Data Loss Prevention (DLP), Encryption, Two-Factor Authentication, Web filtering, and Advanced Threat Protection., * 7+ years of experience with A&A support.

 * Proficient in all steps in the NIST RMF framework

 * Knowledgeable in NIST special publications such as 800-53 & 800-53A
 * Bachelor's degree or equivalent experience

 * In-depth understanding and hands-on experience with multiple vulnerability scanning platforms, to include scanning with Security Technical Information Guides (STIG) and CIS benchmarks.
 * MS Excel proficiency.
 * A related industry certification such as GIAC GEVA, CASP, CAP, CISSP, CISM, GSEC, GMON, Security+.

 * Must be a US Citizen.
 * SECRET clearance required

## Description

* Lead and drive remediation efforts within government environment to increase the efficiency of vulnerability management processes.

 * Articulate risk and impact to product, engineering and other business leaders with the ability to convey the urgency and need to remediate a vulnerability commensurate with the risk it presents to the enterprise.
 * Conduct internal vulnerability assessments and vulnerability analysis upon external vulnerability reports, zero-day announcements, security incidents etc.
 * Monitor and maintain vulnerability and code scanning, security configuration and other vulnerability management tools.
 * Develop, maintain, and recommend security policies, procedures, and standards related to vulnerability management.
 * Participate in security audits and assessments to ensure compliance with regulatory requirements and industry standards.
 * Perform vulnerability re-production and fix validation of vulnerabilities where required.
 * Maintain strong knowledge of ongoing security threats, remediations and operational best practices in the threat and vulnerability management.
 * Create reports and dashboards to drive vulnerability remediation efforts and process improvements.
 * Drive regular operational and business reviews for threat and vulnerability management activities.
 * Support other security operation activities as needed (e.g. detection and response).
 * Participate in the Security Incident response.
 * Review, evaluate, refine, release and maintain Configuration Management Plans in support of program requirements.
 * Provide recommendations and guidance for the identification of Configuration Items (CI) and Computer Software Configuration Items (CSCI).
 * Provide guidance and expertise in the establishment, monitoring and maintenance of configuration baselines on assigned programs.
 * Monitor effectiveness and compliance on assigned programs.