Risk/Vulnerability Management Analyst

Job Title: Risk/Vulnerability Management Analyst

Duration (Contract): 12 Months

Client Location: Richmond, VA 23219

Location Preference: Hybrid

Job Description:
As a Risk/Vulnerability Management Analyst, you will support enterprise cybersecurity initiatives focused on vulnerability assessment, security risk analysis, compliance validation, and vulnerability management operations. This role is responsible for identifying security weaknesses, conducting vulnerability scans, supporting remediation activities, and helping strengthen the organization's overall security posture across cloud, application, database, and infrastructure environments.

The ideal candidate will possess strong experience in vulnerability management, cybersecurity operations, security assessment tools, risk analysis, and remediation tracking. You will collaborate closely with security operations, infrastructure, cloud, and application teams to identify, prioritize, and mitigate security risks while supporting ongoing compliance and security monitoring efforts.

Key Responsibilities:

• Perform vulnerability assessments and security scans across operating systems, databases, web applications, cloud platforms, and enterprise infrastructure.

• Analyze vulnerability findings and develop remediation recommendations based on risk severity and business impact.

• Support cloud compliance assessment and vulnerability management activities.

• Troubleshoot scanning issues and assist with maintaining vulnerability management platforms, consoles, and scanning configurations.

• Plan, schedule, execute, and monitor automated vulnerability scanning activities.

• Support ad-hoc and emergency vulnerability assessments during security incidents and investigative activities.

• Create, maintain, and distribute vulnerability scan reports, dashboards, and security assessment metrics.

• Manage scan policies, repositories, user permissions, and tool configurations.

• Support API discovery, API security assessments, and integration of vulnerability management data into enterprise security tools.

• Collaborate with security operations teams to support vulnerability management processes, testing activities, and remediation efforts.

• Track remediation activities and verify successful resolution of identified vulnerabilities.

• Assist with continuous improvement initiatives related to vulnerability management, security monitoring, and risk reduction.

• Support security governance, compliance, and audit activities as required.

Required Skills, Experiences, Education, and Competencies:

• Experience conducting vulnerability assessments and security scanning across enterprise environments.

• Strong understanding of vulnerability management methodologies, remediation processes, and cybersecurity risk management practices.

• Experience analyzing security findings and prioritizing remediation efforts based on risk and impact.

• Knowledge of operating systems, databases, web applications, cloud platforms, and infrastructure security concepts.

• Experience supporting cloud security assessments and compliance validation activities.

• Familiarity with vulnerability scanning tools, security assessment platforms, and vulnerability management solutions.

• Experience troubleshooting scanning issues and maintaining vulnerability assessment configurations.

• Understanding of automated security scanning, scheduling, reporting, and dashboard management.

• Experience supporting security operations and incident response teams with vulnerability-related investigations.

• Knowledge of API discovery, API security testing, and integration of security data into enterprise systems.

• Ability to produce clear, accurate, and actionable security reports and remediation recommendations.

• Strong analytical, problem-solving, and troubleshooting skills.

• Experience working with cross-functional teams to coordinate remediation and risk reduction activities.

• Understanding of cybersecurity frameworks, security controls, compliance requirements, and industry best practices.

• Excellent written and verbal communication skills with the ability to communicate technical findings to both technical and non-technical stakeholders.

• Ability to work independently while managing multiple priorities in a fast-paced cybersecurity environment.

The hourly range for roles of this nature are $40.00 to $80.00/hr. Rates are heavily dependent on skills, experience, location, and industry.

cyberThink is an Equal Opportunity Employer.