Senior Manager, Vulnerability Management

About Peraton

Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world's leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees solve the most daunting challenges that our customers face. Visit peraton.com to learn how we're keeping people around the world safe and secure.

Program Overview

Peraton provides a full suite of hybrid compute operations services to manage and operate the Hybrid Computing Environment (HCE). The HCE is a collection of enterprise computing resources including a data center, colocation sites, private cloud services, and furnished commercial cloud services.

About The Role

Peraton is seeking a Senior Manager, Vulnerability Management to serve as the technical and operational lead for enterprise vulnerability management across a multi-tenant Data Center environment supporting 30+ tenant systems and multiple General Support Systems (GSS). This role is responsible for directing vulnerability identification, analysis, prioritization, and remediation coordination across Windows, RedHat Linux, hybrid-cloud, database, and API platforms.

The ideal candidate acts as the central authority for translating federal vulnerability and cyber directives into actionable technical remediation plans and leads cross-functional response efforts for critical and zero-day threats. This position partners closely with security, infrastructure, operations, and tenant stakeholders to drive compliance, reduce enterprise risk, and improve remediation performance metrics.

Key Responsibilities:

Vulnerability & Compliance Leadership

• Serve as primary technical lead for vulnerability management across Data Center GSS and tenant environments.
• Review and interpret federal vulnerability directives and alerts and translate them into actionable remediation requirements.
• Direct enterprise response to emerging threats and zero-day vulnerabilities, including impact assessments and coordinated remediation actions.
• Oversee asset risk classification and vulnerability tracking across multi-tenant systems.
• Ensure alignment with federal security mandates and system hardening standards and required remediation timelines.

Technical Analysis & Remediation Oversight

• Lead analysis and validation of vulnerability scan results, including false-positive review and risk prioritization.
• Direct remediation strategies across Windows Server, RedHat Enterprise Linux (RHEL), hybrid cloud, database, and API platforms.
• Oversee vulnerability mitigation aligned to DISA STIGs and enterprise configuration baselines.
• Guide remediation planning where immediate fixes are not feasible, including mitigation strategies and risk documentation.
• Ensure teams apply risk-based prioritization and remediation sequencing.

Operations & Stakeholder Coordination

• Lead recurring vulnerability remediation and status reviews with ISSOs and operations teams.
• Serve as senior technical liaison to system owners and tenant stakeholders regarding risk posture and compliance requirements.
• Coordinate across infrastructure, engineering, and platform teams to remove remediation blockers.
• Provide technical guidance and decision support during high-severity vulnerability and zero-day events.

Reporting & Metrics

• Direct development of executive dashboards and detailed technical vulnerability reports.
• Track and improve key metrics such as remediation timelines and compliance rates.
• Ensure accuracy and timeliness of high-priority vulnerability and threat reporting.
• Present vulnerability posture and remediation progress to leadership and customer stakeholders.

Qualifications

Basic Qualifications:

• Minimum 12 years of experience, may have supervisory or management experience
• Minimum 5+ years in a technical leadership or management role overseeing vulnerability remediation or enterprise security operations.
• Demonstrated experience leading vulnerability management programs in data center or large enterprise environments.
• Must have extensive IT and cybersecurity experience, including vulnerability management, infrastructure security, or platform security operations.
• Hands-on experience with enterprise vulnerability scanning and assessment tools (e.g., Tenable, Nessus, or similar).
• Advanced technical knowledge of Windows Server and RedHat Enterprise Linux security and administration.
• Experience applying system hardening standards and security configuration baselines.
• Experience analyzing vulnerability data and prioritizing remediation using risk-based scoring methodologies.
• Experience coordinating cross-team remediation efforts across infrastructure, platform, and application teams.
• Experience developing technical and executive-level security reports and dashboards.
• Certification Required: active Certified Information Systems Security Professional (CISSP)
• U.S. Citizenship required; must be able to obtain and maintain a DHS Entry on Duty (EOD) clearance.

Preferred Qualifications:

• Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or related field.
• Master's degree in Cybersecurity, Information Assurance, or related field.
• Experience supporting federal or DHS environments with directive-driven vulnerability remediation requirements.
• Experience in multi-tenant data center or hybrid-cloud environments.
• Knowledge of database and API security risks and common vulnerability patterns (e.g., OWASP Top 10).
• Experience with automated compliance and configuration assessment tools.
• Experience managing vulnerability exception and remediation tracking programs.
• Strong familiarity with enterprise vulnerability KPIs such as Mean Time to Remediate (MTTR) and compliance scoring.
• Experience leading zero-day or critical vulnerability response efforts.
• Prior experience coordinating with ISSOs, security engineering, and operations teams.
• Project Management Professional (PMP) certification

SCA / Union / Intern Rate or Range

Details

Target Salary Range: $135,000 - $216,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual's experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.

Benefits Statement: Peraton offers eligible employees a variety of benefits including medical, dental, vision, life, health savings account, short/long term disability, EAP, parental leave, 401(k), paid time off (PTO) for vacation, and company paid holidays. A full listing of available benefits can be viewed at https://www.careers.peraton.com/benefits.

Application Duration Statement: The application period for the job is estimated to be 30 days from the job posting date. However, this timeline may be shortened or extended depending on business needs and the availability of qualified candidates.

EEO:Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.