Leidos Digital Modernization Sector has a career opportunity for a Manager of Cybersecurity Risk & Vulnerability Management to support the Air Force National Capital Region IT Services program.
The AFNCR IT Services program provides support services for information systems for Headquarters Air Force (HAF), Air Force District of Washington (AFDW), Office of the Secretary of Defense (OSD), Joint Chiefs of Staff, and other Air Force activities within the AFNCR, missions to include the Pentagon, Joint Base Andrews (JBA), Joint Base Anacostia-Bolling (JBAB), and other locations, leased spaces, and alternate sites. The major support areas required are IT Operations and Maintenance; Plans, Projects, and Engineering (PP&E); and National Military Command Center (NMCC). The senior leaders and national defense missions that are supported require that the AFNCR operations never fail, resulting in a fast-paced, challenging, but also rewarding environment.
If this sounds like the kind of environment where you can thrive, keep reading!
Leidos Digital Modernization Sector is focused on Delivering enterprise IT, digital modernization and cyber capabilities to meet critical Air Force, Space Force and Defense Agency operational and mission objectives.
Are you ready to make an impact? Begin your journey of a flourishing and meaningful career, share your resume with us today!
POSITION SUMMARY:
We are seeking an experienced Manager of Cybersecurity Risk & Vulnerability Management to lead vulnerability discovery, risk assessment, and threat-based defense operations across a large Department of Defense (DoD) environment. This leader will oversee a blended team responsible for vulnerability management, threat hunting, and risk posture reporting — all driving toward mission assurance, ATO sustainment, and CORA readiness.
Primary Responsibilities:
Lead and manage the Vulnerability Management (VM) and Threat Hunting teams under the Cybersecurity Operations umbrella.
Oversee vulnerability scanning operations (ACAS/Nessus) and ensure scan coverage, credential integrity, and remediation tracking across enterprise systems.
Manage and prioritize remediation workflows in partnership with system owners, ISSOs, and engineering staff.
Coordinate threat hunting campaigns using behavioral analytics, log analysis, and custom detections (e.g., YARA, Sigma).
Develop and maintain risk posture dashboards and reporting to support PMO leadership, CORA inspection prep, and executive visibility.
Maintain alignment with AFMAN 17-130, DoD RMF, and related frameworks.
Identify and drive automation initiatives to improve detection, reporting, and vulnerability lifecycle processes.
Serve as liaison to the enterprise CSSP and coordinate escalation and feedback related to vulnerability alerts or threat advisories.
Mentor junior analysts and ensure professional development and technical proficiency across the team.
Lead a team of Leidos employees and sub-contractors. Responsible for defining the team’s direction and ensure that individual and team goals align with the organization and customer mission.
Provide guidance, support, and resources to help team members succeed and feel motivated to contribute their best work.
Foster an environment of employee growth and development, promoting continuous learning and provide opportunities for skill enhancement.
Responsible for team staffing activities, as well as addressing performance concerns, resolving disputes or disagreements within the team.
Basic Qualifications:
Bachelor’s degree in Cybersecurity, Information Systems, or related field (or equivalent experience) and 5+ years of experience in cybersecurity, with at least 2+ years in a team lead or managerial role.
Possess a current DoD Secret or higher clearance.
Proficiency with Tenable Security Center/Nessus, STIGs, and RMF control families.
Experience analyzing vulnerability scan data and coordinating with patch management teams.
Familiarity with threat detection techniques and behavioral indicators of compromise.
Strong written and verbal communication skills, especially in translating technical risk for non-technical stakeholders.
Preferred Qualifications:
Experience supporting U.S. Air Force or Joint Service cybersecurity environments.
Working knowledge of AFMAN 17-130, STIGViewer, and eMASS.
Familiarity with compliance scoring systems (e.g., CORA, CCRI).
Certifications such as CISSP, GCIH, GCFA, or Security+ CE.
Experience with scripting (PowerShell, Python) to support reporting or detection logic.
Original Posting:July 9, 2025For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.
Pay Range:Pay Range $104,650.00 - $189,175.00The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.