Ofertas › Leidos
Leidos · United States · Remoto · 154050-278475 USD
Position Summary The Tech Lead will coordinate and lead vulnerability management technology improvements across multiple technical teams responsible for delivering components of the end-to-end vulnerability management process. This role will drive the transition from manually coordinated vulnerability remediation to a continuously monitored, automated, and risk-based operating model. The Tech Lead will oversee the integration of continuous monitoring, automated security testing, vulnerability intelligence, automated decisioning, patch orchestration, and remediation validation to enable vulnerabilities to be addressed at machine speed with minimal human intervention. The role requires strong technical leadership, cross-functional coordination, experience with software development and modern engineering practices, and practical knowledge of Agile delivery using the Scaled Agile Framework (SAFe). It also requires the ability to balance automation and rapid remediation with operational resilience, compliance, security, and appropriate human oversight for high-risk or exceptional scenarios. Key Responsibilities Lead the technical delivery of vulnerability management technology improvements across multiple engineering, security, infrastructure, application, cloud, and platform teams. Coordinate cross-team dependencies, priorities, risks, delivery timelines, technical decisions, and implementation activities. Establish and maintain vulnerability management requirements and guide the team’s delivery of technical solutions, capabilities, architectures, implementation plans, and measurable outcomes. Promote consistent engineering standards, integration patterns, automation practices, data quality, security controls, and operational processes. Develop and maintain success metrics and reporting framework (e.g. roadmaps, outcomes, etc.). Ensure technology enhancements support the complete vulnerability management lifecycle, including: Asset and vulnerability identification Continuous monitoring Risk assessment and prioritization Automated remediation Patch testing and deployment Validation and verification Reporting and metrics Exception and risk acceptance management Oversee the seamless integration of continuous monitoring, automated security testing, vulnerability intelligence, automated patching, and remediation validation across the technology estate. Oversee implementation or end-to-end, machine-driven vulnerability remediation workflows that identify, assess, prioritize, remediate, and validate vulnerabilities to ensure alignment to objectives and executive outcome drivers. Coordinate the integration of security tools with: Asset and configuration management platforms Vulnerability scanners Endpoint and patch management tools CI/CD pipelines Cloud platforms DevOps and infrastructure automation tools IT service management systems Reporting and analytics platforms Drive the use of APIs, orchestration, event-driven workflows, infrastructure automation, and policy-as-code to reduce manual handoffs and accelerate remediation. Ensure automated patching processes include appropriate deployment safeguards, such as: Deployment rings Canary releases Maintenance windows Pre-deployment testing Rollback capabilities Exception handling Recovery procedures Collaborate with Product Owners, Enterprise and Solution Architects, Engineering Leads, Security teams, Operations teams, and other delivery stakeholders. Support planning and execution within Agile SAFe ceremonies, including PI Planning, backlog refinement, sprint planning, system demos, reviews, and retrospectives. Track delivery progress and proactively resolve technical issues, delivery risks, impediments, and cross-team dependencies. Contribute to technical roadmaps, solution designs, estimates, business cases, investment proposals, and delivery plans. Ensure solutions are scalable, secure, resilient, supportable, auditable, and aligned with enterprise architecture and cybersecurity requirements. Establish measurable service-level objectives for vulnerability detection, prioritization, remediation, validation, and exception closure. Monitor automation performance using metrics such as: Remediation cycle time Automation coverage Patch success rate Rollback rate Validation failure rate False-positive rate Vulnerability recurrence rate Percentage of vulnerabilities remediated without manual intervention Percentage of vulnerabilities remediated within service-level objectives Ensure automated actions are auditable, traceable, policy-compliant, and supported by appropriate logging, monitoring, alerting, access controls, and change records. Partner with platform engineering, DevOps, infrastructure, application, cloud, and security teams to embed vulnerability remediation into development and operational workflows. Lead continuous improvement initiatives to increase automation coverage, reduce remediation latency, improve data quality, and safely remove unnecessary manual intervention. Communicate complex technical topics, delivery progress, risks, and recommendations clearly to technical and non-technical stakeholders. Required Experience and Skills Master's degree (or equivalent) and 15+ years of experience. Must have an active Secret clearance. Experience working as a Tech Lead, Technical Delivery Lead, Engineering Lead, Security Engineering Lead, or in a similar technical leadership role. Demonstrated experience coordinating technology delivery across multiple technical teams and organizational boundaries. Experience designing, implementing, or operating automated vulnerability remediation and patch orchestration capabilities. Strong understanding of software development lifecycles, modern engineering practices, application architectures, and operational support models. Practical experience working in Agile environments, preferably using the Scaled Agile Framework (SAFe). Strong understanding of continuous monitoring, automated security testing, CI/CD,