Vulnerability Management Analyst- Secret Clearance Required

Description The role: Vulnerability Management Analyst. Travel up to 10%. Requires active Secret clearance (interim approved) and U.S. citizenship. Hybrid location in Littleton, CO. Responsibilities Perform regular vulnerability scans across cloud, on‑prem, application, and endpoint environments. Analyze scan results, validate findings, and assign severity based on industry standards (e.g., CVSS), business context, and exploitability. Work collaboratively with engineering and operations teams to drive timely remediation of vulnerabilities. Monitor external threat intelligence and evaluate emerging vulnerabilities (e.g., zero‑days, trending exploits). Maintain the vulnerability management platform and improve scanning coverage and accuracy. Support patch management processes and ensure alignment with remediation SLAs. Assist in developing and refining policies, procedures, and best practices for vulnerability management. Participate in incident response efforts when vulnerabilities contribute to active threats. Requirements 7+ years of experience in cybersecurity, vulnerability management, or related fields. Hands‑on experience with tools such as Tenable, Qualys, Rapid7, OpenVAS, or similar. Strong understanding of CVE, CVSS, NIST, CIS benchmarks, and vulnerability classification frameworks. Familiarity with cloud platforms (AWS, Azure, GCP). Ability to interpret vulnerability findings, identify actual risk, and communicate clearly with technical and non‑technical stakeholders. Knowledge of patch management practices and change management workflows. Understanding of network architecture, security controls, and common attack vectors. Excellent analytical and problem‑solving skills, with keen attention to detail. Strong communication and interpersonal skills, capable of effective cross‑functional collaboration. Must be a U.S. citizen. Qualities of Exceptional Candidates Relevant certifications (Security+, CySA+, CEH, GSEC, or similar). Experience with automation or scripting (Python, PowerShell, Bash). Background in secure configuration management, container security, or DevSecOps tooling. Knowledge of SIEM or threat detection platforms. About Sherpa 6 At Sherpa 6 we love to solve problems and provide the best solutions for our customers. Our approach is user‑focused and design‑driven, creating simple, functional, and effective solutions with bleeding‑edge technology. We hire forward‑thinkers who are passionate, collaborative, and eager to learn. As a Service‑Disabled Veteran‑Owned Small Business, we are committed to protecting our Warfighters and giving them the edge they need on the battlefield. Background Screening / Check / Investigation Successful completion of a background screening/check/investigation will/may be required as a condition of hire. Ada Sherpa 6 will make reasonable accommodations in compliance with the Americans with Disabilities Act 1990. EEO/Aa Sherpa 6 does not discriminate based on race, color, national origin, sex, religion, age, disability, sexual orientation, gender identity, veteran status, height, weight, or marital status in employment or the provision of services and is an equal access/opportunity/affirmative action employer. Benefits We offer a competitive benefits package covering medical (for you and your family), dental, vision, health and wellness benefits, a generous retirement savings plan, and a generous PTO policy to allow employees to balance work and personal life. Salary Range The proposed salary range is $90,000‑$120,000, reflective across all Sherpa 6 locations, years of experience, and skill levels. Salary negotiations will consider geographic location, prior experience, relevant skills, education, and certifications. #J-18808-Ljbffr