Vulnerability Assessment Analyst

The Vulnerability Assessment Analyst conducts comprehensive vulnerability scanning and analysis across the NNPS network, web applications, business systems, and public-facing web properties. You will work across a large, complex environment and are responsible for producing findings that are accurate, prioritized, and tied to real business risk — not just raw scan output. Responsibilities Conduct external and internal vulnerability scans of all in-scope NNPS systems and network infrastructure. Assess network security architecture against NIST 800-53 controls and identify gaps. Perform web application security assessment across NNPS-hosted and district-utilized applications. Conduct website security assessment of NNPS public-facing web properties. Assess HR, Payroll, and Business Office systems for vulnerabilities affecting sensitive employee and financial data. Correlate scan results against NIST 800-53 and produce a prioritized findings report with severity ratings. Work with internal scanning agents as part of the assessment methodology if required. Collaborate with the Senior Penetration Tester to share findings and inform active testing priorities. Requirements REQUIRED QUALIFICATIONS 3 or more years of experience conducting vulnerability assessments in enterprise or institutional environments. Proficiency with vulnerability scanning platforms — OpenVAS, Nessus, Qualys, or equivalent. Working knowledge of NIST 800-53 and its application to vulnerability prioritization. Experience conducting web application security assessments. Strong documentation skills — findings must be written clearly with business context, not just raw tool output. PREFERRED QUALIFICATIONS CEH, CompTIA PenTest+, or equivalent certification. Experience in K-12, higher education, or municipal government environments. Familiarity with OpenVAS specifically — the current scanning tool in the NNPS environment. Experience with FERPA-regulated environments. #J-18808-Ljbffr Security 1st Consulting