Risk and Vulnerability Analyst
$80,000–$128,000 year
On-siteWashington, District of Columbia, United States or Chandler, Arizona, United States
Job Summary
Support 24x7 SOC operations by performing continuous vulnerability monitoring and risk analysis across enterprise, cloud, and application environments. Execute vulnerability assessments using industry-standard scanning tools, validate findings against ISVM and API security requirements, and correlate data with SOC alerts and threat intelligence. Automate reporting workflows, track remediation timelines with engineering teams, and ensure compliance with DHS 4300A, NIST SP 800-115, and CISA BOD 23-01 standards. Provide operational risk summaries and metrics to leadership. Requires an active Secret security clearance, U.S. citizenship, and experience with vulnerability management tools.
Required Qualifications
- Bachelor's degree in Cybersecurity, Information Technology, or related field
- Minimum of 2 years of experience in security operations, vulnerability management, or risk analysis
- Hands-on experience with industry vulnerability scanning tools, cloud compliance platforms, ISVM, and API scanning
- Experience supporting automation of vulnerability analysis and reporting
- Familiarity with DHS 4300A, NIST SP 800-115, and CISA BOD 23-01 compliance
- U.S. citizenship
- Active Secret security clearance
Desired Qualifications
- 3-5 years of experience in security operations, vulnerability management, or risk analysis
Additional Requirements
- U.S. citizenship required.
- Active Secret security clearance required.
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.