Ethical Hacker (remote)

Seneca Technologies is part of the

is Seneca Holdings’ federal government contracting business that meets mission-critical needs of federal civilian, defense, and intelligence community customers. Our portfolio comprises multiple subsidiaries that participate in the Small Business Administration 8(a) program. To learn more about SNG, visit the website and follow us on LinkedIn.

Your total rewards package includes competitive pay, benefits, and perks, flexible work-life balance, professional development opportunities, and performance and recognition programs. We offer a comprehensive benefits package that includes medical, dental, vision, life, and disability, voluntary benefit programs (critical illness, hospital, and accident), health savings and flexible spending accounts, and retirement 401K plan. Full-time employees working at least 30 hours a week on a regular basis are eligible to participate in our benefits and paid leave programs. We pride ourselves on our collaborative work environment and culture, which embraces our mission of providing financial and non-financial benefits back to the members of the Seneca Nation.

The Vulnerability Assessment Analyst supports a Department of War (DOW) agency contractor environment cybersecurity operations mission by identifying, assessing, and tracking security vulnerabilities across on-premises and cloud-based environments. The analyst is responsible for conducting vulnerability scans, analyzing findings, recommending remediation actions, and supporting risk-based decision-making. This position works closely with system owners, cybersecurity teams, and stakeholders to improve the agency's security posture through continuous assessment, reporting, and remediation tracking activities.

Conduct vulnerability scans and security assessments of information systems, applications, networks, and cloud environments.

Analyze vulnerability assessment results and determine the potential impact to systems and mission operations.

Support continuous monitoring programs through recurring assessments and validation of corrective actions.

Perform risk-based analysis to prioritize vulnerabilities based on severity, exploitability, and mission impact.

Support Risk Management Framework (RMF) activities by providing vulnerability assessment data and supporting authorization decisions.

Collaborate with cybersecurity, engineering, cloud, and operations teams to improve system security and compliance.

Assist with cybersecurity inspections, audits, compliance reviews, and security assessments.

Demonstrated experience performing vulnerability assessments, security scanning, and cybersecurity analysis.

Experience analyzing security findings and recommending risk-based remediation actions.

Working knowledge of Department of War (DOW) cybersecurity requirements and vulnerability management processes.

Understanding of Risk Management Framework (RMF), security authorization, and continuous monitoring principles.

Ability to work independently and collaboratively within a mission-focused cybersecurity environment.

S. citizenship and ability to obtain and maintain all required government security clearances, as applicable.

Comparable vulnerability assessment or cybersecurity certification

Possess current Secret Clearance plus one of the following:

Bachelor's degree in Cybersecurity, Information Assurance, Information Technology, Computer Science, or a related field and a minimum of five (5) years of experience in vulnerability management, cybersecurity assessments, RMF, or system security activities.

Or minimum of nine (9) years of directly relevant cybersecurity, vulnerability assessment, or system security experience in lieu of a degree.

Vulnerability Scanning and Analysis

Vulnerability Prioritization and Risk Assessment

Remediation Planning and Tracking

Security Configuration Assessment

Risk-Based Vulnerability Management

Continuous Monitoring and Validation

Tenable Security Center or Equivalent Platforms

Cloud Security Tools & Platforms

AWS Native Security Monitoring Tools

Microsoft Azure Security Monitoring Tools

Google Cloud Platform (GCP) Security Monitoring Tools

Cloud Vulnerability Assessment and Configuration Review

Risk Management & Compliance

DOW Risk Management Framework (RMF)

Continuous Monitoring Programs

Cybersecurity Knowledge Areas

Network Security Principles

Threat and Vulnerability Analysis

Cyber Risk Analysis and Mitigation

Remote work may be authorized. Employees working remotely must reside within commuting distance of an approved SIPRNet access location and be available to support classified work requirements as needed.

Travel:

Some CONUS travel required

Seneca Holdings provides equal employment opportunities to all employees and applicants without regard to race, color, religion, sex/gender, sexual orientation, national origin, age, disability, marital status, genetic information and/or predisposing genetic characteristics, victim of domestic violence status, veteran status, or other protected class status. This policy applies to all terms and conditions of employment, including, but not limited to, hiring, placement, promotion, termination, layoff, recall, transfer, leave of absence, compensation and training. Veterans with expertise in these areas are highly encouraged to apply.