SMIT-MCEN is the largest IT services program for the Navy and Marine Corps. Under the Service Management, Integration, and Transport (SMIT) portion of the contract, the Leidos team delivers the core backbone of the Navy-Marine Corps Intranet, including cybersecurity services, network operations, service desk, and data transport. Ultimately, Leidos will help unify shore-based networks and data management across the Navy and Marine Corps, improving capability, enhancing service, and achieving significant cost savings by consolidating efforts under one enterprise network. 

To support this critical effort, Leidos is seeking a Vulnerability Management Specialist Mid to join our team in Camp Lejeune, NC. Vulnerability Management Specialist (Mid) supports the Navy SMIT MCEN program by executing enterprise vulnerability management activities across the Marine Corps Enterprise Network (MCEN). This role is responsible for identifying, assessing, tracking, and reporting Information System vulnerabilities using a combination of automated tools and manual techniques to ensure compliance with DoD cybersecurity requirements and risk management frameworks. 

Key responsibilities include, but are not limited to:

• Execute vulnerability identification, assessment, and tracking activities across MCEN environments 
• Perform network and system vulnerability scans using Tenable Security Center, Nessus, and other authorized tools 
• Analyze scan results to identify security weaknesses, misconfigurations, and compliance gaps 
• Utilize tools such as RedSeal, BigFix, SCAP Compliance Checker (SCC), and HP Fortify to support vulnerability detection and remediation efforts 
• Conduct manual inspections and validation of findings where automated tools are insufficient 
• Document, track, and manage vulnerabilities within the RSA Archer eGRC system 
• Generate and report vulnerability metrics, trends, and risk posture to stakeholders 
• Support remediation efforts by coordinating with system administrators, network engineers, and cybersecurity teams 
• Ensure compliance with DoD STIGs, RMF controls, and applicable cybersecurity policies 
• Assist in continuous monitoring and improvement of the vulnerability management program 

Required qualifications: 

• Bachelor’s degree with at least 4 years of related experience; additional experience may be substituted in lieu of degree
• Must have direct vulnerability management experience and IT systems administration experience with cybersecurity responsibilities 
• Must possess a current Security+ certification
• US Citizen with an active DoD Secret security clearance
• Hands-on experience with vulnerability scanning and assessment tools (e.g., Nessus, SecurityCenter) 
• Experience using RSA Archer or similar eGRC tools for risk and compliance tracking 
• Working knowledge of: DoD STIGs and cybersecurity compliance requirements, Risk Management Framework (RMF), and Network and system security principles 

Hourly rate range: $55/hour - $60/hour

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

NGEN

If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo - because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 - and moving faster than anyone else dares.

Original Posting:

Pay Range:

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.