Vulnerability Management Analyst

Job Summary

A company is looking for a Vulnerability Management Analyst - US Federal.

Key Responsibilities:

• Analyze and organize scan results, prioritizing vulnerabilities for remediation based on risk requirements
• Establish relationships with engineering teams to track and report status and remediation timelines
• Contribute to the Planning of Actions and Milestones (POAMs) and support Continuous Monitoring (ConMon) activities

Required Qualifications:

• Experience in managing POAMs for FedRAMP authorized environments
• Knowledge of security standards like FedRAMP, DoD IL-4/5, NIST 800-171, NIST 800-53, and the Risk Management Framework (RMF)
• Experience with commercial scanning tools and the ability to interpret results for remediation guidance
• Experience in cloud computing, preferably with major hyperscalers like AWS or Google
• Proficiency in using tools like Jira for managing tickets and tasks