Vulnerability Management Analyst - Richmond, VA

Responsibilities Include:

Perform vulnerability assessments and assist security scanning across operating systems, databases, web applications, and enterprise infrastructure

Analyze vulnerabilities and support development of remediation recommendations

Support cloud compliance scans and assessment activities

Help troubleshoot scanning issues and support maintenance of vulnerability scanning tools, consoles, and configurations

Support automated and scheduled scanning activities, including scan planning, execution, and reporting

Support ad hoc or emergency vulnerability scanning in support of incident investigation and response activities

Create and maintain scan reports, data feeds, scan policies, repositories, and user access/roles for assessment tools

Support API discovery and scanning, and integration of assessment data into third-party tools

Coordinate with SCC Security Operations team to support tool operations, testing, and vulnerability management activities.

Skill

Required / Desired

Amount

of Experience

Information Security-related experience

Required

5

Years

Software Vulnerability Management related experience

Required

3

Years

Experience troubleshooting vulnerability scan tools and scan configurations

Required

3

Years

Experience with automation supporting vulnerability assessment operations

Required

3

Years

Experience supporting Information System Vulnerability Management (ISVM) scans and compliance activities

Required

3

Years

Experience with API discovery and security scanning

Required

3

Years

Experience and proficiency with Microsoft, SharePoint and Power BI

Required

5

Years

Proven analytical and problem-solving abilities

Required

5

Years

Excellent verbal and written communication skills

Required

5

Years

Ability to work independently with minimal direction and as a team

Required

5

Years

Highly motivated and self-directed

Required

5

Years