SCC - Vulnerability Management Analyst

SCC - Vulnerability Management Analyst (813431)

Virginia Information Technology Agency

Title/Role: SCC - Vulnerability Management Analyst

Region Description:

Req. Status: Open

No. of Openings: 1

Start Date: 10/26/2026

End Date: 10/29/2027

No New Submittals After: 10/13/2026

Max Submittals by Vendor: 2 Per Opening

Worksite Address: 1300 E Main Street Richmond, VA

Agency Interview Type: Web Cam Interview Only

Work Arrangement: Hybrid

Short Description:

SCC - Vulnerability Management Analyst
MAX VENDOR RATE: $101.68
ON SITE: 2-3 days/week. Parking is NOT provided for contractors.
*Deadline to submit: Tuesday Oct 13 by 4 pm EST (*1 day later due to the holiday on 10/12)

Complete Description:

SCC - Vulnerability Management Analyst
MAX VENDOR RATE: $101.68
ON SITE: 2-3 days/week. Parking is NOT provided for contractors.
*Deadline to submit: Tuesday Oct 13 by 4 pm EST (*1 day later due to the holiday on 10/12)

ABOUT THE ROLE:

The State Corporation Commission (SCC) is seeking a Risk and Vulnerability Analyst to support vulnerability assessment and risk analysis activities at the SCC. This role is responsible for conducting vulnerability scanning and analysis, supporting remediation efforts, supporting scanning operations, and helping improve enterprise visibility into security weaknesses and cyber risks.

Responsibilities Include:

• Perform vulnerability assessments and assist security scanning across operating systems, databases, web applications, and enterprise infrastructure
• Analyze vulnerabilities and support development of remediation recommendations
• Support cloud compliance scans and assessment activities
• Help troubleshoot scanning issues and support maintenance of vulnerability scanning tools, consoles, and configurations
• Support automated and scheduled scanning activities, including scan planning, execution, and reporting
• Support ad hoc or emergency vulnerability scanning in support of incident investigation and response activities
• Create and maintain scan reports, data feeds, scan policies, repositories, and user access/roles for assessment tools
• Support API discovery and scanning, and integration of assessment data into third-party tools
• Coordinate with SCC Security Operations team to support tool operations, testing, and vulnerability management activities

Client Information

Work Location:

Virginia (Region 1)

GL:

Skill Required / Desired Amount of Experience

Information Security-related experience Required 5 Years

Software Vulnerability Management related experience Required 3 Years

Experience troubleshooting vulnerability scan tools and scan configurations Required 3 Years

Experience with automation supporting vulnerability assessment operations Required 3 Years

Experience supporting Information System Vulnerability Management (ISVM) scans and compliance activities Required 3 Years

Experience with API discovery and security scanning Required 3 Years

Experience and proficiency with Microsoft, SharePoint and Power BI Required 5 Years

Proven analytical and problem-solving abilities Required 5 Years

Excellent verbal and written communication skills Required 5 Years

Ability to work independently with minimal direction and as a team Required 5 Years

Highly motivated and self-directed Required 5 Years