Mid-Level Continuous Diagnostics and Mitigation (CDM) Engineer

As the CDM Engineer, you will play a key role in operating and advancing the client's Continuous Diagnostics and Mitigation program.

You'll ensure security teams and system owners have the visibility and actionable intelligence needed to identify, prioritize, and remediate vulnerabilities across the enterprise.

In this role, you will:

• Implement, operate, and maintain Continuous Diagnostics and Mitigation (CDM) capabilities that strengthen enterprise cybersecurity posture.
• Maintain the CDM scanning infrastructure supporting client systems across on-premises, cloud, and hybrid environments.
• Partner with technical stakeholders to expand and mature CDM capabilities as the environment evolves through modernization and cloud adoption.
• Support the transition to Ongoing Authorization by providing continuous monitoring and security visibility.
• Deliver continuous asset visibility and improve detection of vulnerabilities, configuration issues, unmanaged assets, and unauthorized software or hardware.
• Manage enterprise vulnerability scanning infrastructure, including credentialed scanning across systems, devices, and applications.
• Analyze vulnerability scan results, prioritize risk, and provide actionable remediation recommendations.
• Monitor the CISA Known Exploited Vulnerabilities (KEV) Catalog and other authoritative guidance to support timely remediation and compliance with applicable Binding Operational Directives.
• Support enterprise asset inventory, configuration monitoring, and compliance reporting activities.
• Collaborate with the client and department stakeholders, system owners, administrators, and technical teams to improve security operations, optimize tools, and support incident response activities.
• Contribute data and analysis supporting executive cybersecurity reporting, including weekly CIO dashboards and ad hoc vulnerability reports.
• Produce and maintain required CDM deliverables, including CDM Scan Results on the DHS-defined periodicity of no less than every three days, CDM Mitigation Procedures documenting mitigation steps and end-user mitigation activities when requested, and compliance reporting.
• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or a related field, or equivalent professional experience.
• Five or more years of experience supporting enterprise vulnerability management, Continuous Diagnostics and Mitigation (CDM), or security operations.
• Experience administering enterprise vulnerability scanning platforms and supporting credentialed scanning across large hybrid environments.
• Working knowledge of the DHS Continuous Diagnostics and Mitigation (CDM) program, including asset management, configuration monitoring, reporting, and CDM dashboard concepts.
• Familiarity with FISMA, FIPS 199, NIST SP 800-53 Rev. 5, Risk Management Framework (RMF), and continuous monitoring supporting Ongoing Authorization.
• Experience managing vulnerabilities in accordance with the CISA Known Exploited Vulnerabilities (KEV) Catalog and applicable CISA Binding Operational Directives.
• Strong analytical, communication, and collaboration skills with the ability to work effectively across technical and customer organizations.
• Ability to satisfy federal background investigation requirements and complete required onboarding before receiving system access.
• U.S. work authorization.

• Professional cybersecurity certification such as CISSP, CompTIA Security+, CySA+, or GIAC certifications (GCIH, GCIA, GMON).
• Tenable platform certification (Tenable Certified Security Center Specialist or Nessus equivalent)
• Experience with enterprise vulnerability management tools such as Tenable.sc, Nessus, and related asset discovery, SIEM, EDR, or configuration management platforms.
• Experience securing AWS and/or Azure cloud environments, including cloud vulnerability and posture management.
• Experience supporting federal civilian agency continuous diagnostic and mitigation programs.
• Experience with scripting or automation using Python, PowerShell, or similar technologies to improve reporting and operational efficiency.

We're invested in the people who make our success possible.

As a K2United employee, you'll enjoy a comprehensive benefits package designed to support your professional and personal well-being, including:

• 401(k) with employer matching
• Low-cost medical coverage for employees and their families
• Paid time off
• Paid leave for jury duty, military service, voting, and other qualifying events
• Wellness stipend, including fitness reimbursement
• Tuition assistance
• Casual work environment
• Technical training and certification support
• Complimentary access to CareerSafe online training courses for employees and their immediate family

K2United is an equal opportunity employer.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability, protected veteran status, or any other characteristic protected by applicable law.