Vulnerability Management Analyst

DecisionPointCybersecurity

United StatesFull-TimeMiddle

Salary not disclosed

Apply NowOpens the employer's application page

Job Details

Active Top Secret clearance, supported by a Tier 5 background investigation.
Bachelor’s degree in Cybersecurity, Information Technology, or a related field.
Minimum 5 years of experience in vulnerability management, cybersecurity operations, or system security analysis.
Proficiency with ACAS and Nessus scanning tools.
Required Certifications: Security+, ACAS Certification, and CEH.
Knowledge of vulnerability scoring (CVSS), exploitability assessment, and prioritization frameworks.
Understanding of DoD RMF continuous monitoring requirements and POA&M processes.
Knowledge of STIGs, secure configuration baselines, and compliance validation.
Experience performing patch verification and configuration-compliance checks.
Familiarity with SIEM platforms, log analysis, and threat context enumeration.

Conduct ACAS vulnerability scans across enterprise systems, applications, and cloud workloads.
Validate vulnerability scan results, confirm patch levels, and verify remediation status across environments.
Analyze vulnerabilities for exploitability, potential impact, and relevance to mission systems.
Prioritize vulnerabilities based on severity, risk scoring, operational context, and DoD guidance.
Coordinate with engineering, system administration, and cloud teams on mitigation steps and remediation timelines.
Update, track, and maintain POA&Ms with accurate vulnerability details and milestone progress.
Provide vulnerability summaries, dashboards, and reporting to cybersecurity leadership and government stakeholders.
Support continuous monitoring activities and reporting cycles in accordance with DoD RMF requirements.
Validate STIG-related findings and support configuration compliance checks.

View Full Description & ApplyYou'll be redirected to the employer's site