RemoteLeaf Logo
Log in Sign up

Vulnerability Management Analyst

6 days, 9 hours ago
United States
Contract
Senior
Security Analyst
Cybersecurity
Cybersecurity
Apply Now
Skyepoint Decisions

Skyepoint Decisions

Skyepoint Decisions specializes in providing comprehensive IT solutions for the federal government, focusing on cybersecurity architecture, critical infrastructure operations, and applications development and maintenance to support a secure and mobile ...

Internet Software & Services
51-250
Founded 2009
View All Jobs 7

Description

  • Perform vulnerability assessments and analyze security weaknesses across information systems and infrastructure.
  • Review vulnerability scan results from enterprise security tools and validate findings for severity, exploitability, and impact.
  • Apply threat-informed prioritization using exploit intelligence, CISA KEV, mission criticality, system exposure, and compensating controls.
  • Assess vulnerability risk in the context of system criticality, data sensitivity, and organizational risk tolerance.
  • Develop dashboards, remediation metrics, trend analyses, and executive reporting products.
  • Track vulnerabilities through the full lifecycle from discovery to remediation, validation, and closure.
  • Coordinate with technical teams on remediation requirements, timelines, and escalation of overdue findings.
  • Maintain vulnerability repositories, remediation records, and status reporting.
  • Support continuous monitoring activities and analyze recurring vulnerability trends.
  • Collaborate with RMF/A&A teams on ATO activities and POA&M tracking.
  • Provide vulnerability evidence and documentation for audits, assessments, and authorization activities.

Requirements

  • Bachelor's degree in Cybersecurity, Information Systems, Computer Science, Engineering, or a related field.
  • Minimum 5 years of experience in cybersecurity, vulnerability management, information assurance, or security operations supporting Federal environments.
  • Experience supporting POA&M development, remediation tracking, corrective action validation, or vulnerability closure activities.
  • Experience conducting vulnerability assessments and remediation tracking.
  • Experience analyzing vulnerability data and developing remediation recommendations.
  • Familiarity with NIST RMF (SP 800-37), NIST SP 800-53 Rev. 5, FISMA, federal cybersecurity compliance requirements, and risk assessment methodologies.
  • Strong analytical, problem-solving, and communication skills.
  • U.S. Citizenship required.
  • Ability to obtain and maintain a Public Trust.
  • One or more preferred certifications: Security+, CEH, CISSP, GVA, GISF, GSEC, CAP, CISM, or CRISC.
  • Experience supporting HHS or other Federal civilian agencies (preferred).
  • Experience working within FISMA-compliant environments (preferred).
  • Knowledge of cloud security and vulnerability management practices (preferred).
  • Experience supporting continuous diagnostics and mitigation (CDM) initiatives (preferred).
  • Understanding of FedRAMP and Zero Trust security principles (preferred).
  • Experience coordinating remediation activities across multiple stakeholders (preferred).

Benefits

  • Salary range of $110,000 to $130,000.
  • Certification incentive program.
  • Flexible work environment.
  • PTO and floating federal holiday options.
  • Medical coverage options including HMO and High Deductible plans with HSAs and FSAs.
  • Dental, vision, short-term disability, long-term disability, and life insurance.
  • 401(k) with company match.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Mews

Transaction Monitoring and Fraud Analyst

Mews 251-1K Consumer Services

Mews is hiring a FinCrime professional to monitor transactions and payment activity, investigate suspicious behavior, and help reduce fraud and financial crime at scale across its growing payments platform.

Spain United Kingdom Full-time Mid Level Security Analyst
$39k-$64k
Python SQL
1 day, 9 hours ago
SecurityScorecard

Writer, Threat Intelligence & Communications

SecurityScorecard 251-1K IT Services

SecurityScorecard is hiring a cybersecurity content strategist to turn threat intelligence and technical findings into executive- and practitioner-facing communications.

United States Full-time Mid Level Security Analyst Technical Writer
$100k-$120k
Cybersecurity Python Splunk SQL
1 day, 9 hours ago
SecurityScorecard

Writer, Threat Intelligence & Communications

SecurityScorecard 251-1K IT Services

SecurityScorecard is hiring a cybersecurity content specialist to create executive-facing threat intelligence and communications content that translates complex security topics into clear narratives for technical and business audiences.

United States Full-time Mid Level Security Analyst Technical Writer
$100k-$120k
Cybersecurity Python Splunk SQL
1 day, 10 hours ago
Recorded Future

Principal Dark Web Collection Analyst

Recorded Future 251-1K Professional Services

Recorded Future is hiring a dark web intelligence expert to own underground community collection strategy and hands-on source access for its expanding threat intelligence operations.

United States Full-time Senior Security Analyst
$152k-$228k
Python
2 days, 9 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers