Senior Technical Support Specialist
If you are a current State of Maine employee, please submit your application through the internal application process using the Find Jobs report in PRISM. Seasonal employees who do not have PRISM access should apply through the State’s career page and indicate on the application that they have previously worked for the State.
.
Office of Information Technology
Opening Date: October 20, 2026
Closing Date: November 3, 2026
Grade / Admin Unit: 29 / Professional/Technical
Job Class Code: 0871
Salary: $74,845.68 - $105,056.22*/Annually (*Includes a 15% recruitment and retention stipend)
Position Number: 004250736
Location: Augusta
Telework: Partial telework options are available after 3 months, with management approval
Currently, this position is not eligible for visa sponsorship or STEM OPT extensions.
DESCRIPTION
As the Vulnerability Management Team Lead, you’ll provide operational leadership, technical direction, and program oversight for the Information Security Office’s enterprise Vulnerability Management and Application Testing program. This role offers the opportunity to guide vulnerability identification, validation, prioritization, remediation coordination, application security testing, reporting, metrics development, and continuous improvement across State systems, applications, cloud services, network environments, and enterprise technology assets.
You’ll work closely with SOC leadership, ISO teams, skilled contractor personnel, application teams, infrastructure teams, agency stakeholders, vendors, service providers, and leadership to improve enterprise visibility into cybersecurity risk. The position supports vulnerability scanning, application testing, limited penetration testing, remediation tracking, secure software development practices, dashboarding, metrics, reporting, and program documentation.
This position also plays a key role in coordinating assigned program resources, advising leadership, supporting risk-informed decision-making, guiding remediation priorities, and ensuring vulnerability management and application testing activities align with ISO priorities and statewide cybersecurity needs.
We are seeking a highly talented individual who will represent our C.A.R.E. values in all that they do.
At MaineIT we
- Practice Customer-focus, ensuring that our customers are heard, and their needs are met
- Hold ourselves to a high level of Accountability by being transparent with our stakeholders
- Maintain an effective level of Responsiveness by providing timely updates in a proactive manner
- Strive to provide Empathy-driven, people-focused services by applying emotional intelligence skills and behaviors
WHAT YOU'LL DO
No two days look quite the same in MaineIT’s Information Security Office. In general, you can expect to:
- Lead Vulnerability Management Operations: Assign and prioritize work, coordinate daily operational coverage, conduct follow-up, guide skilled contractor personnel, support program readiness, and help ensure vulnerability management and application testing work is completed accurately, consistently, and timely.
- Oversee the Enterprise Vulnerability Management Program: Lead vulnerability identification, scanning coverage, validation, prioritization, remediation tracking, exception review preparation, and reporting across State systems, applications, cloud services, network environments, and enterprise technology assets.
- Lead Application Security Testing: Coordinate testing intake, testing activities, analysis, validation, documentation, and communication of application vulnerabilities, including support for secure software development practices and remediation recommendations.
- Administer Security Testing Platforms: Configure, maintain, tune, and improve vulnerability management and application testing platforms to support reliable scanning, accurate results, effective reporting, data aggregation, workflow management, and operational visibility.
- Develop Reporting and Metrics: Build and maintain dashboards, KPIs, KRIs, reports, templates, executive summaries, operational briefings, and trend analysis materials that support risk-informed decision-making and program accountability.
- Coordinate Remediation Activities: Work with application teams, infrastructure teams, agency stakeholders, vendors, and service providers to communicate findings, clarify risk, track remediation progress, resolve capability gaps, and escalate unresolved or high-risk issues.
- Support Security Analysis and Testing: Conduct and coordinate limited penetration testing, vulnerability validation, root-cause review, and technical analysis to identify infrastructure, application, configuration, and process weaknesses.
- Provide Technical Guidance: Advise the Security Operations Center Manager, ISO leadership, technical teams, vendors, service providers, and stakeholders regarding vulnerability management, application testing, remediation priorities, tool use, operational risks, and program improvements.
- Support Security Initiatives and Projects: Participate in stakeholder meetings; analyze technical and operational requirements; contribute to secure software development improvements; develop metrics; produce reports; and deliver briefings or presentations to support informed decision-making.
- Maintain Program Documentation: Develop, document, and maintain standard operating procedures, testing procedures, remediation workflows, vulnerability management playbooks, knowledge articles, workflow diagrams, and supporting operational documentation.
- Support Training and Knowledge Sharing: Provide training, mentoring, and instructional materials on vulnerability review, application testing, security tooling, remediation processes, and response procedures to improve readiness, consistency, and response effectiveness.
WHY THIS ROLE STANDS OUT
As a cybersecurity professional, you have a lot of options when it comes to your career. We get it. Here’s what sets our role apart:
- Enterprise Risk Visibility: Take a leadership role in identifying, validating, prioritizing, and communicating security weaknesses affecting enterprise technology environments.
- Program Leadership: Help guide a fully developed enterprise Vulnerability Management and Application Testing program with statewide cybersecurity impact.
- Application Security Experience: Work with application testing activities, secure development practices, remediation coordination, and application risk reduction across a large public-sector environment.
- Mission-Driven Public Service: Strengthen the capabilities that help protect critical government systems, applications, services, and sensitive information.
- Enterprise-Scale Impact: Support vulnerability visibility and risk reduction across State systems, cloud services, applications, network environments, and other enterprise technology assets.
- Technical Leadership Opportunities: Guide program resources, coordinate stakeholders, advise leadership, improve workflows, refine reporting, and mature vulnerability management and testing practices.
- Strategic Program Involvement: Contribute to testing coverage discussions, risk prioritization methods, dashboard improvements, KPI/KRI development, remediation tracking, and operational planning.
- Continuous Improvement: Help improve program maturity through data quality improvements, reporting enhancements, workflow refinement, secure software development recommendations, and documentation updates.
WHY YOU'LL LOVE WORKING FOR MAINEIT
If you are seeking a culture that supports growth, fosters success, and want to play a key role in maintaining the confidentiality, integrity, and availability of State of Maine data and systems, then MaineIT is where you need to be. With the MaineIT Information Security Office, you can expect:
- Generous Telework Opportunities: This position can work up to 90% remotely with management approval.
- Meaningful & Impactful Work: Lead vulnerability management and application testing activities that support statewide cybersecurity risk reduction.
- Supportive Team: Join a collaborative, professional environment that invests in your development and values operational excellence.
- Work-Life Balance: Flexible scheduling and a healthy balance of professional and personal time.
- Innovative Culture: Be part of a team that values modernization, program maturity, continuous improvement, and practical security outcomes.
- Professional Growth: Work with evolving vulnerability management platforms, application testing tools, security testing methods, remediation workflows, metrics, and enterprise-scale cybersecurity challenges.
MINIMUM QUALIFICATIONS
A minimum of 8 years of a combination of related post-secondary education, technical certifications, or technology related work experience. Related training, internship experience etc. may be credited as related experience on a month-per-month basis.
Preference will be given to candidates who possess the following:
- Working knowledge of vulnerability management practices, application security testing, vulnerability assessment, remediation coordination, risk prioritization, and security operations.
- Experience administering, configuring, tuning, or supporting vulnerability management or application testing platforms such as Rapid7, Tenable, Qualys, Microsoft Defender Vulnerability Management, HCL AppScan, Burp Suite, OWASP ZAP, or comparable technologies.
- Experience coordinating vulnerability scanning, application testing intake, remediation tracking, exception review preparation, validation activities, or vulnerability reporting across enterprise environments.
- Experience with secure software development practices, OWASP Top 10 risks, dynamic or static application testing concepts, manual testing methods, penetration testing concepts, or cloud/container vulnerability review.
- Demonstrated ability to guide technical personnel, coordinate assigned resources,...