RemoteLeaf Logo
Log in Sign up

Vulnerability Management Analyst

4 hours, 57 minutes ago
United States
Contract
Senior
Security Analyst
Cybersecurity
Cybersecurity
Apply Now
Skyepoint Decisions

Skyepoint Decisions

Skyepoint Decisions specializes in providing comprehensive IT solutions for the federal government, focusing on cybersecurity architecture, critical infrastructure operations, and applications development and maintenance to support a secure and mobile ...

Internet Software & Services
51-250
Founded 2009
View All Jobs 7

Description

  • Perform vulnerability assessments and analyze security weaknesses across information systems and infrastructure.
  • Review vulnerability scan results from enterprise security tools and validate findings for severity, exploitability, and impact.
  • Apply threat-informed prioritization using exploit intelligence, CISA KEV, mission criticality, system exposure, and compensating controls.
  • Assess vulnerability risk in the context of system criticality, data sensitivity, and organizational risk tolerance.
  • Develop dashboards, remediation metrics, trend analyses, and executive reporting products.
  • Track vulnerabilities through the full lifecycle from discovery to remediation, validation, and closure.
  • Coordinate with technical teams on remediation requirements, timelines, and escalation of overdue findings.
  • Maintain vulnerability repositories, remediation records, and status reporting.
  • Support continuous monitoring activities and analyze recurring vulnerability trends.
  • Collaborate with RMF/A&A teams on ATO activities and POA&M tracking.
  • Provide vulnerability evidence and documentation for audits, assessments, and authorization activities.

Requirements

  • Bachelor's degree in Cybersecurity, Information Systems, Computer Science, Engineering, or a related field.
  • Minimum 5 years of experience in cybersecurity, vulnerability management, information assurance, or security operations supporting Federal environments.
  • Experience supporting POA&M development, remediation tracking, corrective action validation, or vulnerability closure activities.
  • Experience conducting vulnerability assessments and remediation tracking.
  • Experience analyzing vulnerability data and developing remediation recommendations.
  • Familiarity with NIST RMF (SP 800-37), NIST SP 800-53 Rev. 5, FISMA, federal cybersecurity compliance requirements, and risk assessment methodologies.
  • Strong analytical, problem-solving, and communication skills.
  • U.S. Citizenship required.
  • Ability to obtain and maintain a Public Trust.
  • One or more preferred certifications: Security+, CEH, CISSP, GVA, GISF, GSEC, CAP, CISM, or CRISC.
  • Experience supporting HHS or other Federal civilian agencies (preferred).
  • Experience working within FISMA-compliant environments (preferred).
  • Knowledge of cloud security and vulnerability management practices (preferred).
  • Experience supporting continuous diagnostics and mitigation (CDM) initiatives (preferred).
  • Understanding of FedRAMP and Zero Trust security principles (preferred).
  • Experience coordinating remediation activities across multiple stakeholders (preferred).

Benefits

  • Salary range of $110,000 to $130,000.
  • Certification incentive program.
  • Flexible work environment.
  • PTO and floating federal holiday options.
  • Medical coverage options including HMO and High Deductible plans with HSAs and FSAs.
  • Dental, vision, short-term disability, long-term disability, and life insurance.
  • 401(k) with company match.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Discord

Threat Investigator

Discord 1K-5K Internet Software & Services

Discord is hiring a Threat Investigator on its Violent Actors Team to lead investigations into violent and extremist networks and strengthen detection and enforcement within Trust & Safety.

United States Full-time Senior Security Analyst
$132k-$148k
Machine Learning
4 hours, 57 minutes ago
RIDE

Asset Protection Officer

RIDE 51-250 Automotive

Asset Protection Officer at RIDE Coach and Bus responsible for protecting company premises, staff, and visitors through surveillance, access control, and incident response.

United States Full-time Junior Security Analyst
$37k-$42k
5 hours, 12 minutes ago
Centre for Information Resilience

OSINT Trainer and Investigator - Contractor - Burmese speaker - Myanmar

Centre for Information Resilience 11-50 Diversified Consumer Services

Centre for Information Resilience is hiring a remote contractor to support Myanmar Witness’s capacity-building, open-source investigations, and engagement with civil society partners on conflict-related human rights documentation in Myanmar.

United Kingdom Contract Senior Security Analyst Training Specialist
5 hours, 57 minutes ago
Alphasense

Client Due Dilligence Analyst (DDQ)

Alphasense 51-250 Industrial Conglomerates

AlphaSense is hiring a DDQ Analyst to support its global sales process by managing client due diligence questionnaires and related compliance workflows for an enterprise SaaS platform.

India Full-time Entry Level Operations Specialist Security Analyst
Cybersecurity
1 day, 4 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers