LOE 1 Tech Lead – Vulnerability Management Technology

Position Summary

The Tech Lead will coordinate and lead vulnerability management technology improvements across multiple technical teams responsible for delivering components of the end-to-end vulnerability management process.

This role will drive the transition from manually coordinated vulnerability remediation to a continuously monitored, automated, and risk-based operating model. The Tech Lead will oversee the integration of continuous monitoring, automated security testing, vulnerability intelligence, automated decisioning, patch orchestration, and remediation validation to enable vulnerabilities to be addressed at machine speed with minimal human intervention.

The role requires strong technical leadership, cross-functional coordination, experience with software development and modern engineering practices, and practical knowledge of Agile delivery using the Scaled Agile Framework (SAFe). It also requires the ability to balance automation and rapid remediation with operational resilience, compliance, security, and appropriate human oversight for high-risk or exceptional scenarios.

Key Responsibilities

• Lead the technical delivery of vulnerability management technology improvements across multiple engineering, security, infrastructure, application, cloud, and platform teams.
• Coordinate cross-team dependencies, priorities, risks, delivery timelines, technical decisions, and implementation activities.
• Establish and maintain vulnerability management requirements and guide the team’s delivery of technical solutions, capabilities, architectures, implementation plans, and measurable outcomes.
• Promote consistent engineering standards, integration patterns, automation practices, data quality, security controls, and operational processes.
• Develop and maintain success metrics and reporting framework (e.g. roadmaps, outcomes, etc.).
• Ensure technology enhancements support the complete vulnerability management lifecycle, including:
  • Asset and vulnerability identification
  • Continuous monitoring
  • Risk assessment and prioritization
  • Automated remediation
  • Patch testing and deployment
  • Validation and verification
  • Reporting and metrics
  • Exception and risk acceptance management
• Oversee the seamless integration of continuous monitoring, automated security testing, vulnerability intelligence, automated patching, and remediation validation across the technology estate.
• Oversee implementation or end-to-end, machine-driven vulnerability remediation workflows that identify, assess, prioritize, remediate, and validate vulnerabilities to ensure alignment to objectives and executive outcome drivers.
• Coordinate the integration of security tools with:
  • Asset and configuration management platforms
  • Vulnerability scanners
  • Endpoint and patch management tools
  • CI/CD pipelines
  • Cloud platforms
  • DevOps and infrastructure automation tools
  • IT service management systems
  • Reporting and analytics platforms
• Drive the use of APIs, orchestration, event-driven workflows, infrastructure automation, and policy-as-code to reduce manual handoffs and accelerate remediation.
• Ensure automated patching processes include appropriate deployment safeguards, such as:
  • Deployment rings
  • Canary releases
  • Maintenance windows
  • Pre-deployment testing
  • Rollback capabilities
  • Exception handling
  • Recovery procedures
• Collaborate with Product Owners, Enterprise and Solution Architects, Engineering Leads, Security teams, Operations teams, and other delivery stakeholders.
• Support planning and execution within Agile SAFe ceremonies, including PI Planning, backlog refinement, sprint planning, system demos, reviews, and retrospectives.
• Track delivery progress and proactively resolve technical issues, delivery risks, impediments, and cross-team dependencies.
• Contribute to technical roadmaps, solution designs, estimates, business cases, investment proposals, and delivery plans.
• Ensure solutions are scalable, secure, resilient, supportable, auditable, and aligned with enterprise architecture and cybersecurity requirements.
• Establish measurable service-level objectives for vulnerability detection, prioritization, remediation, validation, and exception closure.
• Monitor automation performance using metrics such as:
  • Remediation cycle time
  • Automation coverage
  • Patch success rate
  • Rollback rate
  • Validation failure rate
  • False-positive rate
  • Vulnerability recurrence rate
  • Percentage of vulnerabilities remediated without manual intervention
  • Percentage of vulnerabilities remediated within service-level objectives
• Ensure automated actions are auditable, traceable, policy-compliant, and supported by appropriate logging, monitoring, alerting, access controls, and change records.
• Partner with platform engineering, DevOps, infrastructure, application, cloud, and security teams to embed vulnerability remediation into development and operational workflows.
• Lead continuous improvement initiatives to increase automation coverage, reduce remediation latency, improve data quality, and safely remove unnecessary manual intervention.
• Communicate complex technical topics, delivery progress, risks, and recommendations clearly to technical and non-technical stakeholders.

Required Experience and Skills

• Master's degree (or equivalent) and 15+ years of experience.
• Must have an active Secret clearance.
• Experience working as a Tech Lead, Technical Delivery Lead, Engineering Lead, Security Engineering Lead, or in a similar technical leadership role.
• Demonstrated experience coordinating technology delivery across multiple technical teams and organizational boundaries.
• Experience designing, implementing, or operating automated vulnerability remediation and patch orchestration capabilities.
• Strong understanding of software development lifecycles, modern engineering practices, application architectures, and operational support models.
• Practical experience working in Agile environments, preferably using the Scaled Agile Framework (SAFe).
• Strong understanding of continuous monitoring, automated security testing, CI/CD, DevSecOps, infrastructure automation, and event-driven integration patterns.
• Understanding of vulnerability management, cybersecurity operations, security tooling, risk management, and risk-based vulnerability prioritization.
• Experience integrating vulnerability scanners, endpoint management platforms, configuration management tools, ticketing systems, cloud services, security platforms, and deployment pipelines.
• Knowledge of automated patch validation, deployment safeguards, release management, rollback strategies, and recovery procedures.
• Experience using APIs, scripting, workflow automation, orchestration platforms, policy-as-code, or similar automation technologies.
• Ability to establish automation KPIs and use operational data to improve remediation effectiveness.
• Ability to balance machine-speed remediation with operational resilience, security controls, compliance obligations, change management, and business continuity.
• Experience defining governance models, approval thresholds, exception processes, and human-oversight controls for automated changes.
• Ability to manage technical dependencies, delivery risks, competing priorities, and stakeholder expectations.
• Strong analytical, problem-solving, communication, facilitation, and influencing skills.
• Experience leading cross-team adoption of automation and standardizing processes across diverse technology environments.
• Ability to convert business, security, compliance, and operational requirements into actionable technical requirements and deliverable outcomes.

Desirable Qualifications and Experience

• Experience with enterprise vulnerability management platforms and security scanning technologies.
• Knowledge of risk-based vulnerability management, vulnerability intelligence, exploitability analysis, and exposure management.
• Experience integrating security tools with IT service management, asset management, configuration management, cloud, DevOps, endpoint, and reporting platforms.
• Experience with automated patching solutions and endpoint or server management technologies.
• Familiarity with deployment rings, canary releases, blue-green deployments, automated rollback, and progressive delivery.
• Experience embedding vulnerability remediation into software development and CI/CD pipelines.
• Familiarity with Agile delivery tools such as Jira, Azure DevOps, or equivalent platforms.
• Experience working in regulated, high-availability, or business-critical technology environments.
• Knowledge of cloud security, container security, infrastructure-as-code, software composition analysis, static application security testing, and dynamic application security testing.
• Relevant certifications in cybersecurity, Agile delivery, architecture, cloud, automation, or project management.

NGEN

If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo — because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 — and moving faster than anyone else dares.

Original Posting:

For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.

Pay Range:

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

Originally posted on Himalayas