Daniel Vermilyea

Manage and mentor a team of engineers responsible for enterprise vulnerability and patch management operations. Oversee vulnerability intake from multiple sources including internal scanning, external assessments, and third-party testing. Direct triage, prioritization, and remediation workflows to align with compliance requirements including PCI-DSS, SOC 2, and CIS. Coordinate remediation efforts with system owners and track progress through ServiceNow ticketing and POAM processes. Perform remediation and validation activities to confirm successful resolution of vulnerabilities. Develop and maintain policies, standard operating procedures, and work instructions for vulnerability and patch management.

Provided SME-level support for enterprise vulnerability management services across multiple large-scale environments. Engineered and optimized Tenable scanning environments including Tenable.sc, Tenable.io, Nessus scanners, Nessus Agents, and Nessus Manager clusters. Supported development and improvement of vulnerability and compliance auditing strategies across diverse infrastructure. Assisted in improving scan accuracy, credentialed scanning configurations, and overall vulnerability program effectiveness. Advised on enterprise vulnerability workflows, remediation strategies, and operational efficiencies.

Served as subject matter expert for the enterprise vulnerability scanning solution supporting the Judiciary Branch, Administrative Office of the U.S. Courts. Led engineering, deployment, and ongoing support for the national vulnerability scanning platform utilizing the Tenable suite. Provided guidance and training to internal teams and government customer personnel on vulnerability identification and mitigation strategies. Supported reporting, metrics development, and overall vulnerability program operations. Mentored team members and assisted Judiciary personnel in resolving complex vulnerability scanning and remediation challenges.

Served as SME for the Tenable Assured Compliance Assessment Solution (ACAS) supporting U.S. Army enterprise environments. Provided Tier III engineering support and guidance aligned with USCYBERCOM and NETCOM cybersecurity requirements. Developed scan policies, compliance configurations, and supporting technical documentation. Supported DISA STIG auditing and CCRI assessment preparation activities

Provided guidance to Tenable scan team. Supported certification and accreditation efforts for enterprise systems under RMF and DIACAP frameworks. Validated implementation of security controls and DISA STIG requirements. Assisted in achieving high-performance CCRI assessment results.

Engineered, deployed, and maintained ACAS vulnerability scanning solution for US Navy ONENET Europe. Transitioned enterprise scanning platform from Retina to Tenable ACAS. Led vulnerability identification, reporting, and mitigation across large-scale network environments. Collaborated with system owners and administrators to implement remediation strategies.

Supported enterprise server environments including deployment, configuration, and maintenance of Microsoft infrastructure. Managed vulnerability scanning and compliance reporting using enterprise vulnerability management tools. Assisted in remediation efforts and security compliance across operational environments.

ITIL Foundation 4

ITIL

CompTIA A+

CompTIA

CompTIA Security+

CompTIA