Vulnerability Assessment Analyst
Core
Identify, assess, and track security vulnerabilities across on-premises and cloud-based environments for a Department of War (DOW) agency contractor.
Role type
Senior IC vulnerability assessment analyst
Builds
Security posture improvements and compliance reporting for federal civilian, defense, and intelligence community customers
Domain
Federal government contracting / Cybersecurity
Required skills
Vulnerability scanning, Risk Management Framework (RMF) knowledge, Security authorization processes, Continuous monitoring, Cloud security assessment, Remediation tracking, Security reporting, Network security principles, Threat and vulnerability analysis, Security compliance requirements
Preferred skills
Tenable certification, CompTIA Security+ CE, CompTIA CySA+, Certified Ethical Hacker (CEH)
Technologies
Tenable Nessus, Tenable Security Center, AWS Native Security Monitoring Tools, Microsoft Azure Security Monitoring Tools, Google Cloud Platform (GCP) Security Monitoring Tools
Responsibilities
Conduct vulnerability scans and security assessments of information systems, applications, networks, and cloud environments; Analyze vulnerability assessment results and determine potential impact to systems and mission operations; Develop and recommend remediation strategies to address identified vulnerabilities; Track vulnerability remediation efforts and coordinate with system owners; Generate reports, metrics, dashboards, and status updates related to vulnerability management activities; Support Risk Management Framework (RMF) activities by providing vulnerability assessment data and supporting authorization decisions.
Seniority
Senior, hands-on IC
