Vulnerability Management Analyst

Job Summary:

The SCC Vulnerability Management Analyst is responsible for conducting comprehensive vulnerability assessments and risk analyses to identify and mitigate security weaknesses within the enterprise infrastructure. This role involves performing scans across various systems, supporting remediation efforts, maintaining scanning tools, and enhancing visibility into cyber risks to ensure compliance and strengthen the security posture. Responsibilities:

• Perform vulnerability assessments and assist with security scanning across operating systems, databases, web applications, and enterprise infrastructure.
• Analyze vulnerabilities and support the development of remediation recommendations.
• Support cloud compliance scans and assessment activities.
• Troubleshoot scanning issues and maintain vulnerability scanning tools, consoles, and configurations.
• Manage automated and scheduled scanning activities including planning, execution, and reporting.
• Conduct ad hoc or emergency vulnerability scans to support incident investigation and response.
• Create and maintain scan reports, data feeds, scan policies, repositories, and user access/roles for assessment tools.
• Support API discovery and scanning, and integrate assessment data into third-party tools.
• Coordinate with the Security Operations team to support tool operations, testing, and vulnerability management activities.

Required Skills & Certifications:

• Minimum 5 years of information security-related experience.
• At least 3 years of software vulnerability management experience.
• 3 years of experience troubleshooting vulnerability scanning tools and configurations.
• 3 years of experience with automation supporting vulnerability assessment operations.
• 3 years of experience supporting Information System Vulnerability Management (ISVM) scans and compliance activities.
• 3 years of experience with API discovery and security scanning.
• Proficiency with Microsoft technologies including SharePoint and Power BI (5 years preferred).
• Strong analytical and problem-solving skills.
• Excellent verbal and written communication skills.
• Ability to work independently with minimal supervision and collaboratively within a team.
• Highly motivated and self-directed work ethic.
• Must physically reside within the United States for the duration of the assignment.

Preferred Skills & Certifications:

• Experience integrating vulnerability assessment data into third-party security tools.
• Familiarity with cloud compliance frameworks and scanning methodologies.
• Experience supporting security operations and incident response teams.

Special Considerations:

• Contractors must reside within the United States; offshore contractors are prohibited.
• On-site presence required 2-3 days per week at the designated location.
• Parking is not provided for contractors.
• Must be available to support emergency or ad hoc scanning related to incident response.

Scheduling:

• Work schedule includes 2-3 days per week on-site with the remainder remote.
• Standard business hours with potential for ad hoc scanning during incident investigations.