Vulnerability Management Analyst II

Job Description

Job Description

Overview

Vulnerability Management Specialist II

Huntsville, AL

Are you ready to enhance your skills and build your career in a rapidly evolving business climate? Are you looking for a career where professional development is embedded in your employer’s core culture? If so, Chenega Military, Intelligence & Operations Support (MIOS) could be the place for you! Join our team of professionals who support large-scale government operations by leveraging cutting-edge technology and take your career to the next level!  

Chronos Operations (CO) is a wholly-owned subsidiary of Chenega Corporation, an Alaska Native Corporation based in Anchorage, AK. Belonging to the Military, Intelligence, and Operations Support (MIOS) Strategic Business Unit (SBU), Chronos has a culture rooted in integrity, respect, and exceptional performance. Chronos is headquartered in Colorado Springs, CO, and provides mission-critical services in Advanced Analytics & AI, Software Engineering, Cybersecurity, Information Technology, and Intelligence. 

Chronos Operations LLC is seeking a Vulnerability Management Specialist II to support cyber defense analysis, and remediation tracking across enterprise systems. This entry-to-mid level role assists in analyzing results and coordinating basic remediation activities under the guidance of senior team members. The specialist contributes to reporting, tool maintenance, and stakeholder coordination to ensure timely and accurate vulnerability management.

Responsibilities

• Assist in reviewing basic scan outputs, filtering known false-positives against baseline configurations, and escalating anomalies per established SOPs
• Assist in scheduling and executing vulnerability scans using tools such as Nessus, Tenable, or other approved platforms.
• Collect asset compliance data, missing patch reports, and endpoint scan diagnostics for senior analyst review.
• Document daily scanning and tracking status in ticketing/tracking registers and support regular team status briefings.
• Perform data entry and generate reports using Gabriel Nimbus, Foundry/Vantage, Excel and other reporting tools.
• Coordinate with stakeholders to support remediation activities and ensure timely resolution.
• Contribute to audit responses and documentation efforts as directed by senior staff.
• Stay current with emerging threats, vulnerabilities, and mitigation strategies.
• Assist in ingesting operational taskings (e.g., CTOs, OPORDs, FRAGOs, TASKORDs, IAVMs) into central tracking registers.
• Coordinate with system administrators and network engineering teams to gather evidence of remediation and mitigation implementation.
• Cross-reference scheduled Authorized Service Interruptions (ASIs) and maintenance windows to schedule and deconflict active vulnerability scanning.
• Support priority mitigation workflows and track emergency patching actions associated with critical Zero-Day/IAVA taskings.
• Other duties as assigned

Qualifications

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science or related field with 3+ years of experience in vulnerability tracking and reporting, with 2+ years in IT or cybersecurity roles OR
• Master’s degree in Cybersecurity, Information Technology, Computer Science or related field with 1+ years of experience in vulnerability tracking and reporting.
• Certifications: Security +
• Must have active Top Secret Clearance with SCI eligibility.
• Successfully pass background and drug screening

Preferred Qualifications:

• Additional Cyber related certifications (CSSP Analyst / Infrastructure Support (CEH, GCIA, GCIH)
• 6–12 months of prior IT helpdesk, system administration, or SOC experience.
• Familiarity with DISA STIGs and SCAP compliance validation tools.
• OT/ICS Experience: Familiarity with Industrial Control Systems (ICS), Operational Technology (OT), or specialized monitoring tools (e.g., Dragos).
• Hands-on experience with DISA ACAS (Tenable SecurityCenter/Nessus), SCAP compliance validation tools (SCC), and eMASS package maintenance.
• Exposure to DoD cybersecurity frameworks and RMF processes preferred.
• Experience supporting POA&M documentation and audit preparation preferred.

Knowledge, Skills and Abilities:

• Foundational IT & OS: Basic understanding of networking fundamentals (TCP/IP, common ports/protocols) and core OS environments (Windows and Linux).
• Cybersecurity Frameworks: Basic understanding of DoD vulnerability management processes (DoDI 8530.01, NIST SP 800-40, CJCSM 6510.01B)
• Vulnerability Standards: Familiarity with DoD vulnerability management concepts (IAVA/IAVM process, CVEs, CVSS scoring).
• Working knowledge of DoD vulnerability scanning and compliance management tools, including ACAS (Tenable Security Center / Nessus), SCAP Compliance Checker (SCC), and eMASS.
• Data & Office Tools: Working proficiency in Microsoft Excel (data sorting, filtering, basic formulas) for metrics and status tracking
• Scanning Platforms: Familiarity with vulnerability scanning platforms such as Tenable Nessus or ACAS
• Ability to meet minimum clearance requirements.
• Ability to work nights, weekends, and holidays on occasion.
• Ability to travel up to 10%.

How you’ll grow

At Chenega MIOS, our professional development plan focuses on helping our team members at every level of their careers to identify and use their strengths to do their best work every day. From entry-level employees to senior leaders, we believe there’s always room to learn.  

We offer opportunities to help sharpen skills in addition to hands-on experience in the global, fast-changing business world. From on-the-job learning experiences to formal development programs, our professionals have a variety of opportunities to continue to grow throughout their careers.  

Benefits

At Chenega MIOS, we know that great people make a great organization. We value our team members and offer them a broad range of benefits.  

Learn more about what working at Chenega MIOS can mean for you.  

Chenega MIOS’s culture

Our positive and supportive culture encourages our team members to do their best work every day. We celebrate individuals by recognizing their uniqueness and offering them the flexibility to make daily choices that can help them be healthy, centered, confident, and aware. We offer well-being programs and continuously look for new ways to maintain a culture where we excel and lead healthy, happy lives.  

Corporate citizenship

Chenega MIOS is led by a purpose to make an impact that matters. This purpose defines who we are and extends to relationships with our clients, our team members, and our communities. We believe that business has the power to inspire and transform. We focus on education, giving, skill-based volunteerism, and leadership to help drive positive social impact in our communities.  

Learn more about Chenega’s impact on the world.  

Chenega MIOS News- 

Tips from your Talent Acquisition Team

We want job seekers exploring opportunities at Chenega MIOS to feel prepared and confident. To help you with your research, we suggest you review the following links:  

Chenega MIOS web site - 

Glassdoor - -at-Chenega-MIOS- EI_IE369514.11,23.htm

LinkedIn - 

Facebook -  

#Chronos Operations, LLC