Vulnerability Management Analyst :: Richmond, VA (Hybrid)

Vulnerability Management Analyst

Location: Richmond, VA (Hybrid)

Duration: 12 months

Seeking for a Risk and Vulnerability Analyst to support vulnerability assessment and risk analysis activities. This role involves conducting vulnerability scanning and analysis, supporting remediation efforts, and enhancing enterprise visibility into security weaknesses and cyber risks.

Responsibilities:

• Perform vulnerability assessments across operating systems, databases, web applications, and enterprise infrastructure.
• Analyze vulnerabilities and develop remediation recommendations.
• Support cloud compliance scans and assessments.
• Troubleshoot scanning issues and maintain vulnerability scanning tools and configurations.
• Conduct automated and scheduled scanning activities, including planning, execution, and reporting.
• Support ad hoc or emergency vulnerability scanning for incident investigation and response.
• Create and maintain scan reports, data feeds, and scan policies.
• Support API discovery and scanning, integrating assessment data into third-party tools.
• Coordinate with Security Operations to support tool operations and vulnerability management activities.

Must have for this role:

• 5 years of Information Security-related experience.
• 3 years of Software Vulnerability Management experience.
• Experience troubleshooting vulnerability scan tools and configurations (3 years).
• Experience with automation in vulnerability assessment operations (3 years).
• Experience supporting ISVM scans and compliance activities (3 years).
• Experience with API discovery and security scanning (3 years).
• Proficiency with Microsoft, SharePoint, and Power BI (5 years).
• Proven analytical and problem-solving abilities (5 years).
• Excellent verbal and written communication skills (5 years).
• Ability to work independently and as part of a team (5 years).
• Highly motivated and self-directed (5 years).