Vulnerability Management Analyst

Location: Richmond, VA
Work Arrangement: Hybrid – 2–3 days onsite per week
Employment Type: Contract

Position Overview

We are looking for an experienced Vulnerability Management Analyst to support enterprise vulnerability assessment, security scanning, compliance, and risk analysis activities.

The selected candidate will perform vulnerability assessments across operating systems, databases, web applications, cloud environments, and enterprise infrastructure. The role will also support vulnerability remediation, scanning operations, compliance activities, automation, and integration of vulnerability assessment data with third-party security tools.

Key Responsibilities

• Perform vulnerability assessments and security scans across operating systems, databases, web applications, cloud environments, and enterprise infrastructure.
• Support Information System Vulnerability Management (ISVM) scans and compliance activities.
• Analyze identified vulnerabilities and assist with remediation recommendations and risk analysis.
• Manage and support software vulnerability management activities.
• Troubleshoot vulnerability scanning tools, scan configurations, consoles, and related issues.
• Support automated and scheduled vulnerability scanning activities, including planning, execution, monitoring, and reporting.
• Perform ad hoc and emergency vulnerability scans to support incident investigation and response.
• Create and maintain vulnerability scan reports, data feeds, scan policies, repositories, and assessment-tool user access/roles.
• Support cloud compliance scans and security assessment activities.
• Support API discovery and security scanning.
• Assist with integration of vulnerability assessment data into third-party security tools.
• Support maintenance and configuration of vulnerability scanning tools and platforms.
• Collaborate with the SCC Security Operations team on vulnerability management, tool operations, testing, and security assessment activities.
• Identify opportunities to improve enterprise visibility into security weaknesses, vulnerabilities, and cyber risks.
• Prepare documentation, reports, and analysis for security and compliance stakeholders.

Required Qualifications

• 5+ years of Information Security experience
• 3+ years of Software Vulnerability Management experience
• 3+ years of experience supporting ISVM scans and compliance activities
• 3+ years of experience troubleshooting vulnerability scanning tools and scan configurations
• 3+ years of experience with automation supporting vulnerability assessment operations
• 3+ years of experience with API discovery and security scanning
• 5+ years of experience with Microsoft technologies, SharePoint, and Power BI
• Strong analytical and problem-solving skills
• Excellent verbal and written communication skills
• Ability to work independently with minimal direction and effectively collaborate with a team
• Highly motivated, self-directed, and detail-oriented

Important Requirement

Candidates must have demonstrable experience with:

Information System Vulnerability Management (ISVM) scans and compliance activities
Software Vulnerability Management

Please clearly highlight these experiences on your resume.

Work Location

Richmond, VA – Hybrid

The position requires the selected contractor to work onsite 2–3 days per week. Local Richmond-area candidates will be given preference.