SOC Vulnerability Management Team Lead - Senior

Job Description Position Summary

ECS is seeking a SOC Vulnerability Management Team Lead - Senior to support the Army National Guard (ARNG) Enterprise Network Operations and Cybersecurity Support (ENOCS) program. In this Task 3 role, the selected candidate will coordinate day-to-day vulnerability management operations across supported enterprise environments, managing scan schedules, triage workflows, remediation tracking, validation activities, and technician workload while ensuring findings are documented accurately and mitigated in accordance with STIGs, IAVMs, RMF requirements, and DoD/ARNG cybersecurity directives. This position directly supports Task 3 - Cybersecurity Operations Support, which delivers 24/7/365 cybersecurity engineering, operations, vulnerability management, threat detection, compliance, and RMF support for Defensive Cyberspace Operations - Internal Defensive Measures (DCO-IDM) across the DoDIN-Army-NG area of responsibility, and works closely with system owners, ISSOs, engineering teams, and broader SOC operations.

This role contributes to protection of ARNG classified and unclassified network environments that support more than 120,000 users and approximately 141,000 endpoints across about 2,800 sites in 54 states and territories. The SOC Vulnerability Management Team Lead - Senior helps sustain cyber readiness for Title 10 and Title 32 missions, mobilization readiness, domestic emergency response, and classified SIPRNet operations by driving continuous scanning, remediation, compliance validation, and audit readiness. The position operates within the ENOCS cybersecurity ecosystem in coordination with organizations and platforms named in the program environment, including the SOC, USIEM, eMASS, and enterprise security capabilities supporting ARNG operations alongside NETCOM Global Cyber Center and DISA DCDC.

Please Note: This position is contingent upon contract award.
Responsibilities

• Lead daily vulnerability management activities across supported ARNG enterprise environments, including scan scheduling, triage, remediation tracking, and validation of corrective actions.
• Assign, monitor, and balance technician workload to ensure timely execution of vulnerability assessment and remediation objectives under Task 3 Cybersecurity Operations Support.
• Validate remediation effectiveness and configuration compliance against applicable STIGs, IAVMs, RMF requirements, and DoD/ARNG cybersecurity directives.
• Track POA&M status, prioritize high-risk vulnerabilities based on operational impact and threat posture, and support continuous monitoring and audit readiness activities.
• Coordinate with system owners, ISSOs, and engineering teams to drive timely mitigation of findings and maintain accurate vulnerability documentation and supporting artifacts.
• Support development of operational metrics, compliance reporting, and status products used to assess vulnerability trends, remediation performance, and program readiness.
• Integrate vulnerability management activities with enterprise compliance processes, including eMASS update and integration activities identified within the ENOCS cybersecurity operations framework.
• Coordinate with SOC and security operations stakeholders to ensure vulnerability data supports broader monitoring, analysis, and defense activities across ARNG classified and unclassified enclaves.
• Contribute to cybersecurity operations conducted in coordination with the NETCOM Global Cyber Center and DISA DCDC to help defend the DoDIN-Army-NG area of responsibility.
• Help maintain enterprise cyber resilience for ARNG missions spanning 54 states and territories by supporting continuous scanning, remediation, and compliance monitoring for a large-scale user and endpoint environment.

Required Skills Required Qualifications

U.S. Citizenship is required

Security Clearance: Secret Eligible

Required Certifications: DCWF Work Role 541-Vulnerability Assessment Analyst - Intermediate proficiency; must hold ONE OR MORE of the following: CEH(P), RCCE Level 1, Cloud+, CPTE, FITSP-A, GCED, GCIH, GCSA, GICSP, GSEC, PenTest+, Security+,

Experience: 7+ years of experience in cybersecurity

Education: Bachelors degree or higher in Computer Science, Cybersecurity, Data Science, Information Systems, Information Technology, or Software Engineering

• Experience coordinating vulnerability management operations, including scan scheduling, triage workflows, remediation tracking, and validation activities.
• Experience documenting findings and validating remediation in accordance with STIGs, IAVMs, RMF requirements, and DoD cybersecurity directives.
• Experience tracking POA&Ms and supporting continuous monitoring and audit readiness objectives.
• Experience developing or supporting operational metrics and compliance reporting related to vulnerability management performance.
• Experience coordinating with system owners, ISSOs, and engineering teams to drive mitigation of identified vulnerabilities.
• Experience supporting enterprise cybersecurity operations in classified and unclassified environments.
• Experience working within large, distributed enterprise environments with multiple stakeholders and operational dependencies.
• Ability to oversee technician tasking and maintain accurate records of vulnerability status, remediation progress, and validation results.

Desired Skills Desired Qualifications

Security Clearance: Active Secret (preferred)

• Experience supporting Army or ARNG cybersecurity operations within the DoDIN-Army-NG area of responsibility.
• Experience using eMASS to support artifact management, compliance updates, or RMF-related vulnerability tracking.
• Experience coordinating vulnerability management activities that inform SOC operations, USIEM-enabled monitoring, or broader cyber defense workflows.
• Experience supporting cybersecurity operations for geographically dispersed enterprises spanning multiple sites, states, or territories.
• Familiarity with ARNG mission support requirements tied to Title 10, Title 32, mobilization readiness, domestic emergency response, or SIPRNet operations.

ECS Federal LLC is an equal opportunity employer and does not discriminate or allow discrimination on the basis any characteristic protected by law. All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, or local jurisdiction law.

is the federal segment of , a $4B global organization with over 10,000 employees. Our nearly 3,500 professionals deliver advanced technology solutions in data and AI, cybersecurity, and enterprise transformation, serving defense, intelligence, and federal civilian agencies.

Our work powers mission-critical outcomes, strengthens technology partnerships, and creates meaningful opportunities for our people. We are defined by a commitment to excellence in delivery, a culture of innovation, and an environment where talent can thrive and grow.

We value:

• Attracting and developing top talent and high-performing teams
• Fostering a culture that is engaging, accountable, and mission-driven