Vulnerability Management / Cyber Operations Analyst

Accountabilities

Conduct vulnerability scans across enterprise systems and infrastructure, analyzing and validating identified weaknesses to determine their severity and potential impact.
Prioritize vulnerabilities and remediation activities in accordance with federal Binding Operational Directive (BOD) guidance and applicable cybersecurity requirements.
Coordinate remediation efforts with infrastructure and application teams, verify corrective actions, and ensure vulnerabilities are properly resolved and closed.
Document false positives, manage risk acceptance processes, and coordinate vulnerability reporting to maintain accurate security records.
Monitor network traffic, system logs, audit logs, and security alerts to identify suspicious activities and potential security incidents.
Investigate suspected and confirmed security breaches, perform root-cause analysis, identify attack pathways, and determine the full scope and impact of threats across affected systems.
Support threat intelligence analysis, digital forensics, and incident response activities, providing rapid technical assistance during security breaches and system failures.
Develop cybersecurity intelligence tools, automated methods, and analytical approaches to identify, mitigate, and eliminate information security risks.
Design and establish cybersecurity architecture acceptance criteria to ensure systems meet applicable security requirements.
Support ongoing cybersecurity initiatives involving audit logging, Zero Trust architecture, encryption, and other advanced security controls.
Conduct periodic security and audit reviews across systems, monitor corrective action plans, and ensure all identified findings are addressed and formally closed.
Document security events, prepare detailed incident reports, and provide recommendations for security improvements and technology upgrades to management.
Develop and maintain cybersecurity standards, policies, and best practices for employees and technical teams.
Communicate security risks, technical findings, and cybersecurity guidelines clearly to both technical and non-technical stakeholders.
Collaborate with relevant teams to strengthen security governance, improve incident response capabilities, and maintain compliance with federal cybersecurity requirements.
Requirements:
Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related field, or equivalent relevant professional experience.
Between 5 and 10 years of professional experience in systems security, cybersecurity operations, vulnerability management, or a closely related discipline.
Relevant industry certifications such as CompTIA Security+, Certified Ethical Hacker (CEH), Certified Information Systems Security Professional (CISSP), or equivalent application and security vendor certifications.
Strong understanding of network protocols, operating systems, including Windows and Linux, and enterprise cybersecurity technologies.
Practical knowledge of Security Information and Event Management (SIEM) solutions and security monitoring tools.
Familiarity with vulnerability assessment platforms, particularly Tenable Security Center and Nessus scanners.
Good understanding of federal cybersecurity policies, regulations, and guidance, including Office of Management and Budget (OMB) requirements, Executive Orders, and the NIST Special Publication 800 series.
Advanced knowledge of encryption technologies, vulnerability assessments, penetration testing methodologies, cyber forensics, intrusion detection, incident response, and security remediation.
Experience analyzing security events, investigating potential threats, identifying root causes, and coordinating incident resolution.
Scripting and automation skills, including the ability to integrate security tools, develop dashboards, and streamline cybersecurity operations.
Strong knowledge of cybersecurity governance, policy development, operational processes, and technical documentation.
Excellent analytical and problem-solving abilities, with exceptional attention to detail and the capacity to manage multiple priorities simultaneously.
Strong written and verbal communication skills, including the ability to explain complex technical risks and security recommendations to diverse audiences.
Must be a U.S. citizen with no dual citizenship, in accordance with agency requirements.
Must be able to successfully pass a federal background investigation to obtain access to sensitive information.
Benefits:
Competitive annual salary ranging from $135,000 to $170,000, depending on experience and qualifications.
Fully remote working arrangement, with the flexibility to work from anywhere in the United States.
Full-time opportunity supporting important federal cybersecurity and information protection initiatives.
Opportunity to work on advanced vulnerability management, threat detection, incident response, and digital forensics activities.
Exposure to federal cybersecurity frameworks, security technologies, and enterprise-scale infrastructure.
Opportunity to contribute to critical security initiatives, including Zero Trust architecture, encryption, and risk mitigation.
Professional growth through hands-on experience with advanced cybersecurity tools, technologies, and methodologies.
Collaborative environment involving cybersecurity specialists, infrastructure teams, and technical stakeholders.