Vulnerability Analyst

Job Summary

Defending the security posture of a mission-critical Department of Veterans Affairs cloud platform, the full-time Vulnerability Analyst will conduct continuous vulnerability scanning across numerous applications and drive remediation efforts within defined timelines, all while working remotely.

Key responsibilities

• Conduct ad-hoc, prescribed, and recurring vulnerability scans for the platform and hosted applications
• Document and report scan findings in accordance with established processes, ensuring compliance with VA RMF and POA&M
• Coordinate with Operations and Engineering teams to track, report, and ensure timely remediation of vulnerabilities

Required qualifications

• Bachelor's Degree in cybersecurity, information technology, or related field
• 5 years of experience in vulnerability management or security scanning
• Expert experience using Nessus or equivalent scanning tools
• CompTIA Security+ or GIAC Enterprise Vulnerability Assessor (GEVA) certification preferred
• Experience supporting a federal agency