Vulnerability Management Analyst

This is a fully remote position, open to applicants in United States.

📋 Description

• Perform ACAS vulnerability assessments across enterprise systems, applications, and cloud environments.

• Validate results from vulnerability scans, ensure patch levels are accurate, and confirm remediation status across various environments.

• Evaluate vulnerabilities for exploitability, potential impact, and their significance to mission-critical systems.

• Prioritize vulnerabilities based on severity, risk scoring, operational context, and Department of Defense (DoD) guidelines.

• Collaborate with engineering, system administration, and cloud teams on mitigation strategies and remediation timelines.

• Update, monitor, and maintain Plans of Action and Milestones (POA&Ms) with precise vulnerability information and progress updates.

• Provide summaries of vulnerabilities, dashboards, and reports to cybersecurity leadership and government stakeholders.

• Assist in continuous monitoring activities and reporting cycles in line with DoD Risk Management Framework (RMF) requirements.

• Validate findings related to Security Technical Implementation Guides (STIGs) and support compliance checks for configurations.

• Manage ACAS scanning schedules, ensure asset coverage, and verify completeness of scans across environments.

• Contribute to incident response efforts when vulnerabilities are associated with active threats.

• Document processes related to vulnerabilities, scanning standards, and remediation workflows.

⛳️ Requirements

• Must possess an active Top Secret clearance, supported by a Tier 5 background investigation.

• Bachelor’s degree in Cybersecurity, Information Technology, or a related discipline.

• At least 5 years of experience in vulnerability management, cybersecurity operations, or system security analysis.

• Experience executing ACAS/Nessus scans and validating vulnerability information.

• Proficient in analyzing vulnerabilities, prioritizing risks, and coordinating remediation efforts with technical teams.

• Experience in updating POA&Ms, tracking mitigation progress, and supporting RMF continuous monitoring efforts.

• Familiarity with performing patch verification and configuration compliance checks.

• Proficient in using ACAS and Nessus scanning tools.

• Knowledge of vulnerability scoring systems (CVSS), exploitability assessments, and prioritization frameworks.

• Understanding of DoD RMF continuous monitoring requirements and POA&M processes.

• Familiarity with STIGs, secure configuration baselines, and compliance validation practices.

• Knowledge of Security Information and Event Management (SIEM) platforms, log analysis, and threat context enumeration.

• Required certifications include Security+, ACAS Certification, and Certified Ethical Hacker (CEH).

• Strong analytical and investigative skills.

• Excellent written and verbal communication abilities.

• High attention to detail.

• Capability to manage multiple priorities in a dynamic, mission-critical environment.

• Strong organizational and documentation skills.

🏝️ Benefits

• Fully remote work arrangement.

• Opportunity to support cybersecurity operations aligned with federal and DoD initiatives.

• Involvement in mission-critical cybersecurity projects.

• Commitment to equal employment opportunities and affirmative action protections.