Risk and Vulnerability Analyst II (R-00140)
True Zero Technologies
Job Description
Job Description
True Zero Technologies, a veteran-owned small business, was founded on the principle that the purposeful enablement of people and technology in an organization directly ties to the quality of its outcomes. True Zero recognizes that those outcomes begin and end with our people, and that is what we have built a community of like-minded, driven, and passionate individuals and innovators who are aligned in a common goal of delivering top-tier services to our customers. Our culture and commitment have been recognized through numerous accolades, including being named one of the Best Places to Work in 2023 in two categories (“Prosperous and Thriving” ($5MM–$50MM in gross revenue) and “Mid-Atlantic Region” (DC, DE, MD, NC, VA, WV)), and again in 2025 as a Best Places to Work honoree. In addition, True Zero earned coveted spots on the Inc. 5000 list of fastest-growing companies in America in 2022, 2023, and 2025 , a testament to our sustained growth driven by our people-first approach and unwavering dedication to excellence.
This candidate will execute vulnerability identification, scanning, analysis, and coordination to reduce system attack. Maintain disciplined vulnerability workflows from discovery through validation and closure. Additionally, will support compliance scanning and troubleshooting across environments, including cloud and on-site scanning while ensuring the reporting is timely, accurate, and usable by stakeholders.
Job Responsibilities- Perform ad hoc and automated vulnerability scanning using accepted tools.
- Conduct cloud compliance scans and on-site scanning as required.
- Analyze findings, prioritize risk, and track remediation progress.
- Troubleshoot scanning issues and improve scan reliability/coverage.
- Produce vulnerability reports and support stakeholder coordination.
- Maintain a customer-service posture for program office and engineering partners.
Job Qualifications
- Bachelor’s degree
- 3 years security-related experience.
- Experience with industry-accepted scanning tools and automated scanning approaches.
- Experience with cloud compliance scans and on-site scanning; skilled at troubleshooting.
- Must be highly organized and customer-service focused.
- Experience with ISVM scanning and compliance tracking
- Experience with API discovery and scanning
- Must be eligible for Secret clearance
We’re actively searching for talented and expereinced professionals who are ready to experience the True Zero difference. As a True Zero team member, you'll enjoy:
- Competitive salary, paid twice per month
- Best in class medical coverage
- 100% of medical premiums covered by True Zero
- Company wide new business incentive programs
- Contribution Incentives (i.e. white papers, blog posts, internal webinars, etc.)
- 3 weeks of PTO starting + 11 Paid Holidays Annually
- 401k Program with 100% company match on the first 4%
- Monthly reimbursement of Cell Phone and Home Internet costs
- Paternity/Maternity Leave
- Investment in training and certifications to broaden and deepen your technical skills
We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.
- ...security missions worldwide.Job Description*** This position is contingent upon contract award ***Overview SOSi is seeking a Risk and Vulnerability Analyst II to support vulnerability assessment and risk analysis activities in alignment with our customer. This role is...RiskContract workWork at officeWorldwideMonday to FridayWeekend workAfternoon shift
- ...The Cyber Security Specialist II/III supports cybersecurity engineering and compliance... ...monitor security posture, and remediate vulnerabilities across supported systems. This position is... ...security control implementation and risk reduction. - Active DoD Secret clearance...RiskFull timeWork at office
$120k - $130k
DescriptionTechFlow Inc. is seeking a Cyber Security Analyst II to support a mission-critical DOD... ...operations by monitoring cybersecurity risks, implementing security controls,... ...and mitigate security vulnerabilities and risksCollaborate with cross-functional...RiskFull timeImmediate startRemote work$87.1k - $157.45k
...Leidos has a career opportunity for a Vulnerability Management Analyst to support the Air Force National Capital... ...to help identify potential CAT I/II/III findings, false positives, and basic... ...knowledge of DISA STIGs, vulnerability risk levels, and POA&M remediation...RiskWork at officeWorldwide$87.1k - $157.45k
...Leidos has a career opportunity for a Vulnerability Management Analyst to support the Air Force National Capital... ...to help identify potential CAT I/II/III findings, false positives, and basic... ...knowledge of DISA STIGs, vulnerability risk levels, and POA&M remediation...RiskWork at officeLocal areaImmediate startWorldwide$110k - $120k
As Sr. Cybersecurity Analyst II, you’ll Provides a wide array of Information Technology (IT... ...Orders (CTO) and Information Assurance Vulnerability Alerts (IAVAs).Assist in defining system... ...support, and implement all phases of the Risk Management Framework (RMF)Provide daily...RiskFull timeLocal area- ...leading practices. ProSidian services focus on the broad spectrum of Risk Management, Compliance, Business Process, IT Effectiveness,... ...Consulting at .Job DescriptionProSidian Seeks a Project Manager II - Management (NMP005) headquartered near CONUS - Washington, DC (...RiskFull timeTemporary workFor contractorsFor subcontractorWork at officeRemote workFlexible hours
- ...solution areas, ProSidian services focus on the broad spectrum of Risk Management, Compliance, Business Process, IT Effectiveness,... ...to prevent incidents. ProSidian Seeks a PHMSA Project Coordinator II in Washington, DC to support an engagement for a agency of the Department...RiskFull timeContract workTemporary workFor contractorsWork at officeFlexible hours
- ...focus on the broad spectrum of Enterprise Service Solutions for Risk Management | Compliance | Business Process | IT Effectiveness | Engineering... ...and to the federal financial regulatory agencies. TEST ENGINEER II - ENGAGEMENT TEAM MEMBER QUALIFICATIONS:Evaluate, recommend and...RiskFull timeContract workTemporary workFor contractorsWork at officeFlexible hours
- ...focus on the broad spectrum of Enterprise Service Solutions for Risk Management | Compliance | Business Process | IT Effectiveness | Engineering... ...at DescriptionProSidian Seeks a HR Compensation Consultant II (HRC6) to support an engagement for a federal financial...RiskPermanent employmentContract workFor contractorsWork at officeRemote workFlexible hours
$159.3k - $202.4k
...sensitive data. They work hands-on with detection systems and vulnerability analysis tools to respond to potential threats to Amazon systems... ...requirements while maintaining an acceptable level of risk.- Identifying and recommending solutions that improve or expand...RiskInternshipFlexible hours- ...talented Software Developer in Test (SDET) - II Location: Remote Department:... ...constructive feedback A strong understanding of risk-based testing, exploratory testing, and... ...(CSTE), Certified Software Quality Analyst (CSQA)) Years of Professional Experience...RiskFull timeWork experience placementRemote work
$104k - $166k
ResponsibilitiesPeraton is currently seeking a Senior Risk and Vulnerability Analyst.Location: Chandler, AZ or Washington DCRole and Responsibilities: The Senior Risk and Vulnerability Analyst supports a 24x7 Security Operations Center (SOC) by identifying, analyzing,...RiskContract workShift work- ...practices. ProSidian provides enterprise services/solutions for Risk Management | Compliance | Business Process | IT Effectiveness |... ...DescriptionProSidian Seeks a Environmental, Safety And Health Analyst II (Experienced ES&H) | Occupational Safety, Industrial Hygiene, &...RiskFull timeContract workTemporary workFor contractorsWork at officeLocal areaImmediate startFlexible hours
- ...leading practices. ProSidian services focus on the broad spectrum of Risk Management, Compliance, Business Process, IT Effectiveness,... ...Service Management) Capital Planning Investment Controls Analyst II to support an engagement for an American scientific agency within...RiskFull timeTemporary workFor contractorsWork experience placementWork at officeFlexible hours
$86k - $138k
...the security of customer systems. Identify vulnerabilities and develop recommended remediations to satisfy... ...Tester (GXPN) Zero Point Security Red Team Ops II Advanced understanding of the following: NIST Risk Management Framework (RMF) and the Assessment...RiskContract workFlexible hoursShift work$137.5k - $229.1k
...a PROJECT - Engineering Delivery Manager II on the Government & Public Services Engineering... ..., configuration management, and vulnerability remediation. Configure and administer GitHub... ...Standards and Technology (NIST), Federal Risk and Authorization Management Program (FedRAMP...RiskLocal areaFlexible hours- ...Apply today and be more with Baker. Summary The Project Manager II provides overall management direction on complex project(s). Establishes... ...Manages the Construction Process Manages Project Safety and Risk Management Processes Ensures a Safe Work Environment Participates...RiskFor contractors
$130k - $147k
...Title: Systems Analyst II Job Posting Description KBR's National Security Solutions team provides high-end engineering and advanced... ...and other coding environments (e.g., Python, Java, C++, C#, R, MATLAB, and Simulink) Four (4) years of experience designing,...Full timeTemporary workLocal areaRelocation package- ...Phoenix Cyber is looking for Vulnerability Analysts to join our client delivery team. This is a remote position. Provide technical leadership... ...identifying and prioritizing vulnerabilities based on risk Develop and implement vulnerability and threat remediation...RiskFull timeRemote work
- ...position of Personnel Security Specialist II.Job Description:Summary: The Personnel Security... ...checks required, identify and associate risk and sensitivity levels, identify integrity... ...to use the appropriate guidelines of 5 C.F.R. part 731, 1400, and executive orders 10450...RiskFor contractorsInterim roleWork at office
$76.6k - $157k
...encourages growth. The Senior Consultant - Technology Third Party Risk Management (TPRM) role offers an opportunity to be part of an... ...for this role ends on May 31, 2027Work you’ll do The Consultant II - Technology Third Party Risk Management role in the Tax Transformation...RiskWork at officeLocal areaVisa sponsorshipShift work- ...U.S. Government customer to provide cybersecurity vulnerability analysis support to reduce the prevalence and impact... ...Resources (CIKR). The Cybersecurity Vulnerability Analyst utilizes cybersecurity best practices, risk management techniques, critical thinking, and strong...Risk
$109.2k - $202.8k
...to contribute to the company’s success. As a Relationship Manager II within PNC's Community Development Banking organization, you will... ...goals. Typically works with clients with moderate levels of risk and complexity of needs. Generally works with a moderate degree of...RiskFull timeTemporary workPart timeWork experience placementWork at officeLocal area- ...Job Description Job Description Job Title: Project Manager II- Nuclear Projects Location: Richland, WA Duration: 12 Months... ...order preparation, work prioritization, resource loading, risk management, and work execution including resolution of schedule delays...RiskPermanent employmentContract workTemporary workWork experience placementImmediate start
- ...Clearance Required: Top Secret************CONTINGENT UPON AWARD***************Duties & Responsibilities:Security Specialist II - Risk Assessment Specialist will manage the Position Description (PD) database containing all FCC positions.Security Specialist II identify...RiskFor contractorsLocal areaRelocation
$80k - $110k
...Project Manager II Innovas, Inc. Washington, District of Columbia, United States About this position About Innovas At Innovas, we are... ...communication across all stakeholders involved in project execution. Risk and Issue Management Identify and assess project risks and assist...RiskFull timeFor subcontractorRemote workFlexible hours- cFocus Software seeks a Vulnerability Management Analyst to join our program supporting the United States International Defense Finance Agency (DFC).... ...platforms. ~ Demonstrated ability to assess vulnerability risk using CVSS, exploitability, CISA KEV status, asset...RiskFull timeFor contractorsRemote work
- ...Business. SUBJECT MATTER EXPERTS specializing in security and risk management. We’re intimately familiar with DOD security programs... ...Watermark, our people come first! Activity Security Representative II The Activity Security Representative’s primary function is to...RiskHourly payContract workFor contractorsWork experience placementLocal area
$91k - $140k
...Information Security Engineer II Job Description To support... ...a Senior Security Operations Analyst to assist in all operational... ...technologies including; incident, vulnerability and threat management as well... ...within our SIEM. · Document risk and mitigation controls,...RiskFull timeWork experience placementWorldwide
Do you want to receive more vacancies?
Subscribe and receive similar vacancies to Risk and Vulnerability Analyst II (R-00140). Be the first to apply!
- it risk analyst Washington DC
- transaction risk analyst Washington DC
- senior quantitative risk analyst Washington DC
- operational risk specialist Washington DC
- operational risk consultant Washington DC
- third party risk analyst Washington DC
- risk analyst Washington DC
- risk officer Washington DC
- risk consultant Washington DC
- ethical hacker Washington DC



