Haystack
← Back to Jobs
Other
DE

Risk and Vulnerability Assessment

Delviom LLCUnited States🇺🇸United StatesPosted Oct 13, 2026

Why This Role Stands Out

This hybrid role offers a fantastic opportunity to leverage your deep expertise in risk and vulnerability assessments, utilizing cutting-edge tools to protect critical federal systems and drive significant security improvements. You'll thrive here if you possess hands-on experience with leading assessment platforms and a strong understanding of NIST frameworks, contributing to a dynamic team focused on robust cybersecurity. Apply today to make a tangible impact and advance your career in a supportive environment.

Quick Overview

Seniority
Mid Senior
Work mode
Hybrid
Location
United States
Posted
Yesterday
Risk Assessment

Job Description

  • Extensive experience leading enterprise risk and vulnerability assessments across federal systems, networks, applications, cloud infrastructure, and High Value Assets.
  • Strong expertise in vulnerability scanning, security configuration assessment, vulnerability prioritization, risk analysis, and remediation validation.
  • Advanced hands-on experience with Tenable Nessus, Tenable Security Center, Qualys, Rapid7, and comparable vulnerability assessment platforms.
  • Ability to analyze CVEs, CVSS scores, CISA Known Exploited Vulnerabilities (KEV), configuration weaknesses, exploitability, and business impact to prioritize security risks.
  • Experience conducting Risk and Vulnerability Assessments (RVAs), technical security assessments, control validation, and security posture evaluations aligned with NIST guidance.
  • Strong knowledge of NIST SP 800-53, NIST SP 800-53A, NIST SP 800-115, FISMA, FedRAMP, and federal vulnerability management requirements.
  • Experience managing vulnerability remediation tracking, POA&M development, corrective action verification, accepted risks, and executive risk reporting.
  • Ability to develop Risk Assessment Reports (RARs), vulnerability assessment findings, remediation roadmaps, risk metrics, and recommendations for reducing recurring security weaknesses.

Similar jobs