Vulnerability Management Analyst

Position:  Vulnerability Management Analyst (Ref: 18773)

Location:  Richmond, VA USA, 23219

Salary:  DOE

Duration:  1 Years 2 Months 25 Days - Contract

Openings:  1

Deadline:  10/13/2026

Description:

***Local Candidates

***Hybrid – onsite 2-3 days/week

We are seeking an experienced Vulnerability Management Analyst to support enterprise-level vulnerability assessment and cyber risk analysis activities. This role is responsible for conducting vulnerability scans, analyzing security weaknesses, guiding remediation efforts, supporting scanning operations, and enhancing enterprise visibility into security posture and cyber risk.

Key Responsibilities

• Perform comprehensive vulnerability assessments and security scanning across enterprise infrastructure, operating systems, databases, and web applications.
• Analyze vulnerabilities, assess risk levels, and collaborate with technical teams to develop actionable remediation recommendations.
• Support cloud compliance scans and multi-environment assessment activities.
• Troubleshoot scanning issues and assist in maintaining vulnerability scanning tools, consoles, agents, and system configurations.
• Plan, execute, and support automated, scheduled, and ad hoc/emergency vulnerability scans in support of incident investigation and response.
• Create and maintain scan policies, repositories, data feeds, comprehensive reports, and role-based access for assessment platforms.
• Support API discovery and scanning, as well as integrating vulnerability data into third-party reporting and tracking tools.
• Coordinate closely with Security Operations (SecOps) teams to support testing, operational readiness, and overarching vulnerability lifecycle management.

Qualifications & Requirements

• Proven professional experience in vulnerability management, cyber risk analysis, and information security assessment.
• Hands-on experience operating enterprise vulnerability scanning platforms (e.g., Tenable/Nessus, Qualys, Rapid7 InsightVM, or equivalent).
• Solid understanding of vulnerability scanning across diverse environments, including Windows, Linux, databases, web applications, and cloud infrastructure.
• Familiarity with common vulnerability scoring frameworks (CVSS), CVEs, and industry compliance benchmarks (CIS, NIST).
• Experience with API discovery, scanning, and integrating assessment feeds into ticketing or reporting platforms.
• Strong analytical, troubleshooting, and communication skills to interface effectively with infrastructure, development, and SecOps teams.
• Must be able to work on-site in a hybrid capacity (2–3 days per week).
• Engagement Type: Contract (Long Term)
• Location: Richmond, VA (Hybrid: 2–3 days/week on-site)
• Interview Type: Web Cam Interview

Required / Desired Skills

• Information Security-related experience Required - 5 Years
• Software Vulnerability Management related experience Required - 3 Years
• Experience troubleshooting vulnerability scan tools and scan configurations Required - 3 Years
• Experience with automation supporting vulnerability assessment operations Required - 3 Years
• Experience supporting Information System Vulnerability Management (ISVM) scans and compliance activities Required - 3 Years
• Experience with API discovery and security scanning Required - 3 Years
• Experience and proficiency with Microsoft, SharePoint and Power BI Required - 5 Years
• Proven analytical and problem-solving abilities Required - 5 Years
• Excellent verbal and written communication skills Required - 5 Years
• Ability to work independently with minimal direction and as a team Required - 5 Years
• Highly motivated and self-directed Required - 5 Years