Information Security Analyst (Vulnerability Management)
Core
Identify, analyze, and remediate security vulnerabilities across cloud and on-premises environments while supporting compliance with government and industry security requirements.
Role type
Senior IC Information Security Analyst (Vulnerability Management)
Builds
Secure cloud and on-premises environments for defense and humanitarian-aid clients
Domain
Defense contracting, supply chain security, government compliance
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Vulnerability scanning and assessment, risk prioritization, remediation planning, cloud security (Azure, OCI, AWS), compliance framework implementation (NIST, CMMC, ISO 27001), automation scripting (PowerShell, Python), incident response support
Preferred skills
ISO 27001 audit support, incident response and security investigations, familiarity with Tenable/OpenVAS/Qualys/Rapid7/Defender/Inspector tools
Technologies
Azure AD/Entra ID, AWS IAM, Oracle IAM, SAML, OAuth, OIDC, SCIM, CrowdStrike, Splunk, Elastic, Defender for Endpoint, Defender for Cloud, Oracle Vulnerability Manager, Amazon Inspector, Tenable, OpenVAS, NIST SP 800-171, NIST SP 800-53, CMMC Level 2, FedRAMP
Responsibilities
Conduct regular vulnerability scans across cloud and on-premises assets, analyze scan results and prioritize findings, collaborate with IT and engineering teams to remediate vulnerabilities, develop automation scripts for vulnerability management, support incident response with risk analysis, document processes and findings, assist with compliance evidence and reporting
Seniority
Senior, hands-on IC
