Vulnerability Management Analyst

Position: SCC - Vulnerability Management Analyst
Duration: 8 months (possibility for extension)

Location: 1300 E Main St Richmond, VA 23219

Visa: USC/GC

• Job Description:

  ON SITE: 2-3 days/week. Parking is NOT provided for contractors.
  *Deadline to submit: Tuesday Oct 13 by 4 pm EST (*1 day later due to the holiday on 10/12)
  
  
  
  
  ABOUT THE ROLE:
  
  
  
  
  The State Corporation Commission (SCC) is seeking a Risk and Vulnerability Analyst to support vulnerability assessment and risk analysis activities at the SCC. This role is responsible for conducting vulnerability scanning and analysis, supporting remediation efforts, supporting scanning operations, and helping improve enterprise visibility into security weaknesses and cyber risks.

  Responsibilities Include:

  Perform vulnerability assessments and assist security scanning across operating systems, databases, web applications, and enterprise infrastructure

  Analyze vulnerabilities and support development of remediation recommendations

  Support cloud compliance scans and assessment activities

  Help troubleshoot scanning issues and support maintenance of vulnerability scanning tools, consoles, and configurations

  Support automated and scheduled scanning activities, including scan planning, execution, and reporting

  Support ad hoc or emergency vulnerability scanning in support of incident investigation and response activities

  Create and maintain scan reports, data feeds, scan policies, repositories, and user access/roles for assessment tools

  Support API discovery and scanning, and integration of assessment data into third-party tools

  Coordinate with SCC Security Operations team to support tool operations, testing, and vulnerability management activities